Mobility Guard

Release Details

Package Details

The application consist of the following components:

1. Dashboard Package
   
   • LP_MobilityGuard OneGate 
2. Normalization Package
   
   • LP_MobilityGuard OneGate

Enhancement

A minor update has been done in the application’s normalizer for better signature handling. 

General Description

The MobilityGuard application normalizes MobilityGuard events and enables you to analyze MobilityGuard data using pre-set dashboard views. You can further customize the dashboard and searches to perform in-depth analysis.

Installation 

Follow these steps to install the MobilityGuard v5.0.0 plugin:

1. Download the MobilityGuard package from the Download section above.
2. Add the required MobilityGuard as a device in LogPoint.
3. Create a collection policy with the Syslog collector and appropriate processing policy. 
4. Assign the policy to the device.
5. Add the dashboard.

Supported Version

The supported version of MobilityGuard with LogPoint in this configuration is:

• MobilityGuard OneGate

Log Format

Expected Log Format

Mobility Guard

Log Samples

<134>Jul 6 03:10:38 onegate [MAIN] [01] (????-????) (??) (??) Merging logfiles: For date: 2017-07-05

2017-01-18 00:11:01.641 [01] (????-????) (00) (??) DNS Query from (/10.0.0.1): {login.abc 0 IN A}, Status: NOERROR, Answer section: { login.abc 3600 IN A [194.168.1.7] } Jan 19 12:21:03 onegate [MAIN] [01] (????-????) (00) (??) DNS Query from (/10.0.0.1): {login.abc 0 IN A}, Status: NOERROR, Answer section: { login.abc 3600 IN A [194.168.1.7] }

<150>Jan 20 12:38:21 onegate [REQUEST] [01] (mydf-VWYK) (01) (??) (mg-local) 403 Access denied (common.js) (GET /mg-local/common.js)

To export data to LogPoint use Syslog collector on port 514 on the LogPoint server.

Support

If you have any queries or require assistance, please feel free to contact our support team: 

Email: servicedesk@logpoint.com
Phone: +45 7060 6100

Best regards,