| Table of Contents | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
About the Device
WALLIX Bastion is a leading Privileged Access Management (PAM) solution that delivers robust security and oversight over privileged access to critical IT infrastructure. Through your digital transformation, WALLIX Bastion can be seamlessly deployed from on-premise to private and public cloud infrastructures. WALLIX Bastion can help organizations improve security and protect against cyber threats, especially as more employees work remotely. Below are its typical capabilities and features.
Device Information
Entity | Particulars |
|---|---|
Vendor Name | Wallix |
Product Name | Bastion (Previously Known as AdminBastion) |
Type of Device | Hosted |
Collection Method
Log Type | Ingestion label | Preferred Logging Protocol - Format | Log collection method |
|---|---|---|---|
Wallix Bastion | WALLIX_BASTION | Syslog KV/Unstructured | CyberHub |
Unix system | NIX_SYSTEM | Syslog Unstructured | CyberHub |
Port Requirements
Source | Destination | Port |
|---|---|---|
Wallix Bastion | CyberHub | 601 (TCP) |
To facilitate secure communication and align with our best practice, we strongly encourage the use of Transport Layer Security (TLS) between your security devices and our Adaptive MxDR platform for event forwarding.
While we understand that TLS support may not be available on all devices, if your devices do support TLS communication, we recommend utilizing port 6514 for seamless integration.
In some cases, the upgraded version of the device might incorporate TLS support without prior notice. If you come across such a scenario or for further assistance in configuring TLS, we kindly ask you to reach out to your dedicated Adaptive MxDR Service Delivery Lead.
Device Configuration
Access the Wallix Bastion administration console with admin credentials.
In System > SIEM Integration, configure following:
IP address or FQDN of the server - CyberHub
Transmission protocol - TCP
Port number - 601
Log format - RFC5424
Filters - Select all the available logged filters/categories
Click Apply.
Integration Parameters
Parameters required from customer for Integration.
Property | Default Value | Description |
|---|---|---|
IP Address | Wallix Bastion interface IP address | Hostname or IP address of the device which forwards logs to the CyberHub |