Zertificon Z1

Release Details

Package Details

The application consist of the following component:

1. Normalization Package
   
   • LP_Zertificon Z1 

Enhancement

A minor update has been done in the application’s normalizer for better signature handling.

General Description

The Zertificon Z1 application normalizes Zertificon Z1 SecureMail Gateway events and enables you to analyze Zertificon Z1 data. You can further customize the searches to perform in-depth analysis.

Installation 

Follow these steps to install the Zertificon Z1 v5.0.0 plugin:

1. Download the Zertificon Z1 package from the Download section above.
2. Add the required Zertificon Z1 as a device in LogPoint.
3. Create a collection policy with the Syslog collector and appropriate processing policy. 
4. Assign the policy to the device.

Supported Version

The supported version of Zertificon Z1 with LogPoint in this configuration is:

• Zertificon Z1

Log Format

Expected Log Format

Zertificon Z1

Log Sample

2015-07-20 17:23:21,574 http-8443-2 INFO access| USER [abcuser] PAGE [X.509 Certificate Management>>Certificate Import Result] ACTION [CREATE] MESSAGE [user certificate has been successfully imported: fingerprint: 7bb7ca78962d8ca3cd0aab941573c9b9246c139a, e-mail: test@xyz.com] HOST [1.1.1.1]

To export data to LogPoint use Syslog collector on port 514 on the LogPoint server.

Support

If you have any queries or require assistance, please feel free to contact our support team:

Email:             servicedesk@logpoint.com

Phone:           +45 7060 6100

Best regards,