| Table of Contents | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
About the Device
Trend Micro Apex One protects enterprise networks from malware, network viruses, web-based threats, spyware, and mixed threat attacks. An integrated solution, Apex One consists of the Security Agent program that resides at the endpoint and a server program that manages all agents.
Device Information
Entity | Particulars |
|---|---|
Vendor Name | Trend Micro |
Product Name | Apex One/Apex Central |
Type of Device | Hosted/Cloud |
Collection Method
Log Type | Ingestion label | Preferred Logging Protocol - Format | Log Collection Method |
|---|---|---|---|
Trend Micro Apex one | TRENDMICRO_APEX_ONE | Syslog (CEF) | CyberHub |
Port Requirements
Source | Destination | Port |
|---|---|---|
Trend Micro Apex one/Apex Central | CyberHub | 6514 (TLS) |
To facilitate secure communication and align with our best practice, we strongly encourage the use of Transport Layer Security (TLS) between your security devices and our Adaptive MxDR platform for event forwarding.
...
In some cases, the upgraded version of the device might incorporate TLS support without prior notice. If you come across such a scenario or for further assistance in configuring TLS, we kindly ask you to reach out to your dedicated Adaptive MxDR Service Delivery Lead.
Device Configuration
Sign in to Apex Central console using an Administrator account.
Navigate to Administration > Settings > Syslog Settings
Select the Enable syslog forwarding.
Configure the following settings for the server that receives the forwarded Syslogs:
Server address: Hostname or IP address of the receiving Syslog server.
Port: Syslog server port number. For UDP, the IANA standard port number is 514. For SSL/TLS, mention port 6514.
Protocol: Select TCP/UDP - for OnPrem
...
Configure the Frequency for when Apex Central forwards the logs.
Select the Log type(s) to forward:
Select a log category from the Log type dropdown list:
Security logs
Product information
Select the check box for the log(s) you want to forward. Apex Central displays the total number of selected log types.
Click Test Connection to test the server connection. The syslog server connection status will appear at the top of the screen.
Click Save
Integration Parameters
Parameters required from customer for Integration.
Property | Default Value | Description |
|---|---|---|
IP Address | Trend Micro Apex one/Apex Central IP address | Hostname or IP address of the device which forwards logs to the CyberHub. |