About the Device
Trend Micro Apex One protects enterprise networks from malware, network viruses, web-based threats, spyware, and mixed threat attacks. An integrated solution, Apex One consists of the Security Agent program that resides at the endpoint and a server program that manages all agents.
Device Information
Entity | Particulars |
|---|---|
Vendor Name | Trend Micro |
Product Name | Apex One |
Type of Device | Hosted/Cloud |
Collection Method
Log Type | Ingestion label | Preferred Logging Protocol | Log Collection Method |
|---|---|---|---|
Trend Micro Apex one | TRENDMICRO_APEX_ONE | Syslog (CEF) | CyberHub |
Port Requirements
Source | Destination | Port |
|---|---|---|
Trend Micro Apex one | CyberHub | 514 (UDP) |
Device Configuration
Sign in to Apex Central console using an Administrator account.
Navigate to Administration > Settings > Syslog Settings
Select the Enable syslog forwarding.
Configure the following settings for the server that receives the forwarded Syslogs:
Server address: Hostname or IP address of the receiving Syslog server.
Port: Syslog server port number. For UDP, the IANA standard port number is 514. For SSL/TLS, mention port 6514.
Protocol: Select TCP/UDP - for OnPrem
Select the log Format,
CEF: Uses the standard Common Event Format (CEF) for log messages
Configure the Frequency for when Apex Central forwards the logs.
Select the Log type(s) to forward:
Select a log category from the Log type dropdown list:
Security logs
Product information
Select the check box for the log(s) you want to forward. Apex Central displays the total number of selected log types.
Click Test Connection to test the server connection. The syslog server connection status will appear at the top of the screen.
Click Save
Integration Parameters
Parameters required from customer for Integration.
Property | Default Value | Description |
|---|---|---|
IP Address | Trend Micro Apex one IP address | Hostname or IP address of the device which forwards logs to the CyberHub. |