Versions Compared

Old Version 1

changes.mady.by.user Miguel Lauriano

Saved on

compared with

New Version Current

changes.mady.by.user Aparna Rr

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Source

Destination

Port

 Microfocus NetIQ eDirectory

CyberHub

6514 (TCP)

To facilitate secure communication and align with our best practice, we strongly encourage the use of Transport Layer Security (TLS) between your security devices and our Adaptive MxDR platform for event forwarding.

While we understand that TLS support may not be available on all devices, if your devices do support TLS communication, we recommend utilizing port 6514 for seamless integration.

In some cases, the upgraded version of the device might incorporate TLS support without prior notice. If you come across such a scenario or for further assistance in configuring TLS, we kindly ask you to reach out to your dedicated Adaptive MxDR Service Delivery Lead.

Device Configuration

Pre-requisites:

...

System Requirements: NetIQ Audit iManager Plug-in requires iManager 3.1 at a minimum.

Configuring the CEF Property File :

The eDirectory media includes a sample properties file, auditlogconfig.properties.template file in the configdir (n4u.server.configdir) directory.

Location of the Property File:

...

Replace the above Windows Commands if LINUX OS is used :

Windows

Linux

#log4j.appender.S.SSLCertFile=C:\\Novell\\mycert.pem

#log4j.appender.S.SSLCertFile=etc/opt/novell/mycert.pem

#log4j.appender.S.CacheDir=C:\\NetIQ\\eDirectory

#log4j.appender.S.CacheDir=/var/opt/novell/eDirectory

#log4j.appender.R.File=C:\\cef-events.log

#log4j.appender.R.File=/var/opt/novell/eDirectory/log/cef-events.log

Configuring To Configure the CEF Events for Auditing:

  1. Open iManager from a Web browser using the following URL: <https://ip_address_or_DNS/nps/iManager.html>

  2. Log in using your username and password (Admin Mode)administrator credentials.

  3. Select Roles and Tasks. > eDirectory Auditing > Audit Configuration

  4. Select the CEF tab

  5. Configure the CEF events

    1. Do Not Send Replicated Events: Select this option to stop receiving duplicate events due to replication from other servers.

    2. Basic Events Configuration : Select all Events.

  • Individual event categories under the basic events configuration section will be collapsed by default. You can expand each category and select ALL sub-events.

  • We DO NOT recomment recommend filtering of any Object Events and Attribute Events. Select ALL from the available list whenever presented.

  • TimeZone is always selected as UTC. No other timezone should be selected and not TimeZone is supported.

Integration Parameters

...