Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Log Type

 Ingestion label

Preferred Logging Protocol - Format

Log Collection Method

Trend Micro Apex one

TRENDMICRO_APEX_ONE

Syslog (CEF)

CyberHub

...

Source

Destination

Port

Trend Micro Apex one

CyberHub

6514 (TLS)

To facilitate secure communication and align with our best practice, we strongly encourage the use of Transport Layer Security (TLS) between your security devices and our Adaptive MxDR platform for event forwarding.

While we understand that TLS support may not be available on all devices, if your devices do support TLS communication, we recommend utilizing port 6514 for seamless integration.

In some cases, the upgraded version of the device might incorporate TLS support without prior notice. If you come across such a scenario or for further assistance in configuring TLS, we kindly ask you to reach out to your dedicated Adaptive MxDR Service Delivery Lead.

Device Configuration

  1. Sign in to Apex Central console using an Administrator account.

  2. Navigate to Administration > Settings > Syslog Settings

  3. Select the Enable syslog forwarding. 

  4. Configure the following settings for the server that receives the forwarded Syslogs:

    1. Server address: Hostname or IP address of the receiving Syslog server.

    2. Port: Syslog server port number. For UDP, the IANA standard port number is 514. For SSL/TLS, mention port 6514.

    3. Protocol: Select TCP/UDP - for OnPrem

...