Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
minLevel1
maxLevel6
outlinefalse
styledisc
typelist
printablefalse

About the Device

Trend Micro Apex One protects enterprise networks from malware, network viruses, web-based threats, spyware, and mixed threat attacks. An integrated solution, Apex One consists of the Security Agent program that resides at the endpoint and a server program that manages all agents.

Device Information

 Entity

Particulars

Vendor Name

Trend Micro

Product Name

Apex One/Apex Central

Type of Device

Hosted/Cloud

Collection Method

Log Type

 Ingestion label

Preferred Logging Protocol - Format

Log Collection Method

Trend Micro Apex one

TRENDMICRO_APEX_ONE

Syslog (CEF)

CyberHub

Port Requirements

Source

Destination

Port

Trend Micro Apex one/Apex Central

CyberHub

6514 (TLS)

To facilitate secure communication and align with our best practice, we strongly encourage the use of Transport Layer Security (TLS) between your security devices and our Adaptive MxDR platform for event forwarding.

...

In some cases, the upgraded version of the device might incorporate TLS support without prior notice. If you come across such a scenario or for further assistance in configuring TLS, we kindly ask you to reach out to your dedicated Adaptive MxDR Service Delivery Lead.

Device Configuration

  1. Sign in to Apex Central console using an Administrator account.

  2. Navigate to Administration > Settings > Syslog Settings

  3. Select the Enable syslog forwarding. 

  4. Configure the following settings for the server that receives the forwarded Syslogs:

    1. Server address: Hostname or IP address of the receiving Syslog server.

    2. Port: Syslog server port number. For UDP, the IANA standard port number is 514. For SSL/TLS, mention port 6514.

    3. Protocol: Select TCP/UDP - for OnPrem

...

  1. Configure the Frequency for when Apex Central forwards the logs.

  2. Select the Log type(s) to forward:

    1. Select a log category from the Log type dropdown list:

      1. Security logs

      2. Product information

    2. Select the check box for the log(s) you want to forward. Apex Central displays the total number of selected log types.

  3. Click Test Connection to test the server connection. The syslog server connection status will appear at the top of the screen.

  4. Click Save

Integration Parameters

Parameters required from customer for Integration.

Property

Default Value

Description

IP Address

Trend Micro Apex one/Apex Central IP address

Hostname or IP address of the device which forwards logs to the CyberHub.