...
Log Type | Ingestion label | Preferred Logging Protocol - Format | Log Collection Method |
|---|---|---|---|
Thycotic | THYCOTIC | Syslog (CEF) | CyberHub |
Port Requirements
Source | Destination | Port |
|---|---|---|
Thycotic Delinea Secret Server | CyberHub | 514 (UDP) |
To facilitate secure communication and align with our best practice, we strongly encourage the use of Transport Layer Security (TLS) between your security devices and our Adaptive MxDR platform for event forwarding.
While we understand that TLS support may not be available on all devices, if your devices do support TLS communication, we recommend utilizing port 6514 for seamless integration.
In some cases, the upgraded version of the device might incorporate TLS support without prior notice. If you come across such a scenario or for further assistance in configuring TLS, we kindly ask you to reach out to your dedicated Adaptive MxDR Service Delivery Lead.
Device Configuration
Navigate to Administration > Configuration.
Select the General tab and click the Edit.
Check the Enable Syslog/CEF Logging check box. When you do this, three additional text boxes or lists appear:
Syslog/CEF Server: Syslog server IP
Syslog/CEF Protocol: UDP
Syslog/CEF Port: 514
Complete or configure those controls.
Click Save.
...
Property | Default Value | Description |
|---|---|---|
IP Address | Thycotic Delinea Secret Server IP address | Hostname or IP address of the device which forwards logs to the CyberHub. |