...
SecureAuth Identity Platform (IdP) is an identity management solution that uses two-factor authentication and SSO for mobile, the cloud, web and virtual private networks (VPN).It accepts an identity from either a manual or automated process, authenticates the identity and asserts the identity in a secure, trusted format. This ensures that the correct identity is accessing an organization's website and data. SecureAuth is a shrink-wrapped IdP (on-premise or cloud) with variable two-factor built in.
Device Information
Entity | Particulars |
|---|---|
Vendor Name | SecureAuth |
Product Name | Identity Platform (IdP) |
Type of Device | Cloud/Hybrid |
Collection Method
Log Type | Ingestion label | Preferred Logging Protocol - Format | Log collection method |
|---|---|---|---|
SecureAuth | SECUREAUTH_SSO | Syslog - KV | CyberHub |
Port Requirements
Source | Destination | Port |
|---|---|---|
SecureAuth Identity Platform | CyberHub | 601 (TCP) |
Device Configuration
Please follow below steps for Syslog configuration:To facilitate secure communication and align with our best practice, we strongly encourage the use of Transport Layer Security (TLS) between your security devices and our Adaptive MxDR platform for event forwarding.
While we understand that TLS support may not be available on all devices, if your devices do support TLS communication, we recommend utilizing port 6514 for seamless integration.
In some cases, the upgraded version of the device might incorporate TLS support without prior notice. If you come across such a scenario or for further assistance in configuring TLS, we kindly ask you to reach out to your dedicated Adaptive MxDR Service Delivery Lead.
Device Configuration
To configure Syslog
Log in the Classic Console
Click on Logs
Provide log instance Log Instance ID
Please click in the Select Syslog checkbox for Audit Logs and Error Logs as shown below:.
...
Under In Syslog tab, Provide provide CyberHub details in Syslog Server text box
Enter the port number as 601
In syslog Syslog RFC Spec, select RFC5424 from the dropdown
Private Enterprise Number (PEN) is optional.
...
Click on save Save
Integration Parameters
Parameters required from customer for Integration.
Property | Default Value | Description |
|---|---|---|
IP Address | SecureAuth Identity Platform interface IP address | Hostname or IP address of the device which forwards logs to the CyberHub |