VeriSecFreja

Release Details

Package Details

The application consist of the following components:

1. Dashboard Package
   
   • LP_Verisec Freja 
2. Normalization Package
   
   • LP_Verisec Freja 
3. Label Package
   
   • LP_VerisecFreja 

Enhancement

A minor update has been done in the application’s normalizer for better signature handling.

General Description

The  VeriSec Freja application normalizes  VeriSec Freja events and enables you to analyze  VeriSec Freja data using pre-set dashboard views. You can further customize the dashboard and searches to perform in-depth analysis.

Installation 

Follow these steps to install the VeriSec Freja v5.0.0 plugin:

1. Download the VeriSec Freja package from the Download section above.
2. Add the required VeriSec Freja as a device in LogPoint.
3. Create a collection policy with the Syslog collector and appropriate processing policy.  
4. Assign the policy to the device.
5. Add the dashboard.

Supported Version

The supported version of VeriSec Freja with LogPoint in this configuration is:

• VeriSec Freja vR2.4.0.11860-1367.

Log Format

Expected Log Format

VeriSec Freja

Log Samples

<159>2013-06-07 09:39:03,447 DEBUG frejaSOAPLogger - [id=1 user=IMMUNE IP=1.1.1.1] userWithDomain: username= segili domain= AD.XYZ.COM kerberosUsername= IMMUNE uniqueName= XYZ@AD.XYZ.COM

<159>2013-07-02 08:09:30,148 DEBUG xyzLogger - [id=1 user=logpoint IP=1.1.1.1] Starting Radius proxy authentication...

To export data to LogPoint, use Syslog collector on port 514 on the LogPoint server.

Support

If you have any queries or require assistance, please feel free to contact our support team:

Email:             servicedesk@logpoint.com

Phone:           +45 7060 6100

Best regards,