Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Next »

About the Device

Trend Micro Apex One protects enterprise networks from malware, network viruses, web-based threats, spyware, and mixed threat attacks. An integrated solution, Apex One consists of the Security Agent program that resides at the endpoint and a server program that manages all agents.

Device Information

 Entity

Particulars

Vendor Name

Trend Micro

Product Name

Apex One

Type of Device

Hosted/Cloud

Collection Method

Log Type

 Ingestion label

Preferred Logging Protocol

Log Collection Method

Trend Micro Apex one

TRENDMICRO_APEX_ONE

Syslog (CEF)

CyberHub

Port Requirements

Source

Destination

Port

Trend Micro Apex one

CyberHub

6514 (TLS)

Device Configuration

  1. Sign in to Apex Central console using an Administrator account.

  2. Navigate to Administration > Settings > Syslog Settings

  3. Select the Enable syslog forwarding. 

  4. Configure the following settings for the server that receives the forwarded Syslogs:

    1. Server address: Hostname or IP address of the receiving Syslog server.

    2. Port: Syslog server port number. For UDP, the IANA standard port number is 514. For SSL/TLS, mention port 6514.

    3. Protocol: Select TCP/UDP - for OnPrem

image-20240119-125156.png

  1. Select the log Format,

CEF: Uses the standard Common Event Format (CEF) for log messages

  1. Configure the Frequency for when Apex Central forwards the logs.

  2. Select the Log type(s) to forward:

    1. Select a log category from the Log type dropdown list:

      1. Security logs

      2. Product information

    2. Select the check box for the log(s) you want to forward. Apex Central displays the total number of selected log types.

  3. Click Test Connection to test the server connection. The syslog server connection status will appear at the top of the screen.

  4. Click Save

Integration Parameters

Parameters required from customer for Integration.

Property

Default Value

Description

IP Address

Trend Micro Apex one IP address

Hostname or IP address of the device which forwards logs to the CyberHub.

  • No labels