Logo
Resources
Documentation Portal Ideas Portal Guardsix Academy License Portal
Resources
Documentation Portal Ideas Portal Guardsix Academy License Portal
Sign in
  1. Guardsix Servicedesk
  2. Products Hub
  3. Marketplace

Mobility Guard

Archived

Release Details

Version: 5.0.0
Release date: 2020-05-14
Supported On: LogPoint v6.0.0 and later
SHA 256: 002decfc80cc036b11c309175c3987c6fabeb6f5e989334d526bfbe2dc4882e0
Download

Package Details

  1. Dashboard Package
    • LP_MobilityGuard OneGate
  2. Normalization Package
    • LP_MobilityGuard OneGate

Enhancement

A minor update has been done in the application’s normalizer for better signature handling.

Installation

Follow these steps to install the MobilityGuard v5.0.0 plugin:

  1. Download the MobilityGuard package from the Download section above.
  2. Add the required MobilityGuard as a device in LogPoint.
  3. Create a collection policy with the Syslog collector and appropriate processing policy.
  4. Assign the policy to the device.
  5. Add the dashboard.

General De scription

The MobilityGuard application normalizes MobilityGuard events and enables you to analyze MobilityGuard data using pre-set dashboard views. You can further customize the dashboard and searches to perform in-depth analysis.

Log Format

Expected Log Format

Mobility Guard

Log Samples

<134>Jul 6 03:10:38 onegate [MAIN] [01] (????-????) (??) (??) Merging logfiles: For date: 2017-07-05

2017-01-18 00:11:01.641 [01] (????-????) (00) (??) DNS Query from (/10.0.0.1): {login.abc 0 IN A}, Status: NOERROR, Answer section: { login.abc 3600 IN A [194.168.1.7] } Jan 19 12:21:03 onegate [MAIN] [01] (????-????) (00) (??) DNS Query from (/10.0.0.1): {login.abc 0 IN A}, Status: NOERROR, Answer section: { login.abc 3600 IN A [194.168.1.7] }

<150>Jan 20 12:38:21 onegate [REQUEST] [01] (mydf-VWYK) (01) (??) (mg-local) 403 Access denied (common.js) (GET /mg-local/common.js)

To export data to LogPoint use Syslog collector on port 514 on the LogPoint server.

Support

If you have any questions or require assistance, create a support ticket.

Comments

Article is closed for comments.

Follow

Related articles

  • Mod Security
  • Entropy
  • Mitre Dataset Updater
  • Vectra
  • Kiteworks
Consent Required To Proceed
By clicking “I Agree & Download”, you confirm that you are authorized to act on behalf of your organization and you give explicit consent for Guardsix to share your organization’s customer name and log source count with NXLog for the sole purposes of entitlement management, compliance verification, and support delivery related to the embedded NXLog technology in the Guardsix SIEM solution.

This data will not be used for sales or marketing and will not be shared with other third parties. You may withdraw your consent at any time by contacting Guardsix Support; withdrawal will not affect processing already performed.
Cancel I Agree & Download
Privacy policy    EULA    Terms of service   
Copyright © , Guardsix. All rights reserved.

Note: We use cookies that are essential for the smooth functioning of our website.