...
Log Type | Ingestion label | Preferred Logging Protocol - Format | Log collection method |
|---|---|---|---|
Nasuni File Services Platform | NASUNI_FILE_SERVICES | Syslog (JSON) | CyberHub |
Port Requirements
Source | Destination | Port |
|---|---|---|
VectraNasuni Edge Appliance | CyberHub | 601 (TCP) |
To facilitate secure communication and align with our best practice, we strongly encourage the use of Transport Layer Security (TLS) between your security devices and our Adaptive MxDR platform for event forwarding.
While we understand that TLS support may not be available on all devices, if your devices do support TLS communication, we recommend utilizing port 6514 for seamless integration.
In some cases, the upgraded version of the device might incorporate TLS support without prior notice. If you come across such a scenario or for further assistance in configuring TLS, we kindly ask you to reach out to your dedicated Adaptive MxDR Service Delivery Lead.
Device Configuration
Log in to Nasuni Edge Appliance with Admin credentials as an administrator.
Click Configuration.
Select Syslog Export Configuration
Syslog Exporting Page will appear
...
Provide CyberHub IP and Port into the Servers empty box. Format for providing this detail is as host:port
Adaptive MXDR recommends enabling Send Auditing messages to On.
Select the facility on the Logging Facility and Select select the Log Level for Audit messages as Info.
Click on Save.
...
Parameters required from customer for Integration.
Property | Default Value | Description |
|---|
Protocol
TCP
Preferred protocol.
Host Names/ IP Addresses
*
Specify the IP addresses or host names. Possible values: IP, hostname, or '*' .
Signatures
AUDIT_CLOSE, AUDIT_READDIR, AUDIT_UTIMENS, AUDIT_WRITE, AUDIT_MKNOD, AUDIT_SETXATTR, AUDIT_TRUNCATE, AUDIT_UNLINK
Specify the list of signatures (comma-separated list of strings) that are used to filter the incoming syslog
Enable Signatures
True
Boolean property (represented by a checkbox in UI) that allows you to disable the signature filtering.
Port Number
601
IP Address | Nasuni Edge Appliance interface IP address | Hostname or IP address of the device which forwards logs to the CyberHub |