Activate P-Cisco Firepower (Obsolete)

1

OpenText OpenText Community

App Support Tiers

OpenText SUPPORTED

Support via OpenText Software Support, with a ticket filed against the associated product.

PARTNER

OpenText offers a content partnership program for select partners. Support for Partner Content offerings is provided by the partner and not by OpenText of the OpenText community.

OpenText COMMUNITY

OpenText Community Content is provided by OpenText for the benefit of customers, support for it is not available via OpenText Software Support but through specific community content forums.

COMMUNITY

Community Contributed Content is provided by OpenText customers and supported by them.

EARLY ACCESS

Show less ...Show more

The downloads referenced under the "Cybersecurity Early Access" category are made available to subscribers to mitigate time-critical issues but have not undergone formal quality and performance testing associated with official OpenText/Cybersecurity product releases. OpenText has a multi-stage Quality Assurance process. During Stage 1 we conduct a resource analysis, field mapping, ensure content level 1 functionality and analysis in our sandbox environment. Stage 2 is a complete validation including production validation. This package has cleared Stage 1 validation and therefore should be deployed with the appropriate pre-production validation. OpenText strongly recommends that any downloaded content is first checked and tested thoroughly in a non-production environment before committing to production. We welcome feedback and, should any content be shown to be faulty, detrimental or carry an incorrect claim of authorship, we shall endeavor to remove or correct such content as promptly as reasonably possible once notified and validated.

OpenText | OpenText Community

Activate P-Cisco Firepower package it’s designed to handle events generated by Cisco Firepower devices.

0 reviews

161 downloads

Product compatibility

ArcSight ESM

CATEGORY

ArcSight | Obsolete Packages

Description
Requirements
Suggested apps
Releases
Resources
Reviews

Have questions about this item?

Contact us
Subscribe to receive update notifications for this item
Subscribe

Description

Activate P-Cisco Firepower package offers the capability to monitor network traffic events generated by this device, it also has the flexibility to be integrated with other Activate packages that are designed to detect abnormal behavior based on the events received.

This product package provides support for the following L1 and L2 Packages:

L1 and L2 Entity Monitoring
L1 and L2 Network Monitoring
L1 and L2 Perimeter Monitoring

Minimum Requirements

Activate Base- Version 2.5.2.0 and later

Suggested apps

OpenText COMMUNITY

Playbook-Check IP Reputation from Multiple Sources

OpenText

A Playbook for Check IP Reputation from Multiple Sources Usecase

Cisco Network Admission Control

OpenText

This Novell Sentinel Collector provides data-capture capabilities for Cisco Network Admission Control and related products.

Novell Access Governance Suite

OpenText

This Novell Sentinel Collector provides data-capture capabilities for Novell Access Governance Suite and related products.

Sqrrl Threat Hunting Solution for ArcSight

Sqrrl

Sqrrl delivers the power of analytics-driven threat hunting to HPE ArcSight. Sqrrl's Threat Hunting solution extends ArcSight's threat detection capabilities with adversarial behavior analytics, user and entity risk scoring and unique Behavior Graph.

OpenText COMMUNITY

MITRE ATTACK Package for ArcSight Logger

OpenText

The Logger MITRE ATT&CK Package is a set of Logger Searches which let you hunt MITRE ATT&CK related activity.

Dependency-Track Plugin for Fortify SSC

Steve Springett

This plugin allows Fortify SSC to integrate results from Dependency-Track alongside findings from SCA, providing a consolidated view of security-centric code findings and vulnerable component findings.

OpenText COMMUNITY

Playbook-Multiple Authentication Failure

OpenText

A Playbook for Multiple Authentication Failure Usecase

OpenText COMMUNITY

Playbook-Admin Account Check

OpenText

A Playbook for Admin Account Check Usecase

OpenText COMMUNITY

WebInspect API Scanning (WISwag)

OpenText

WebInspect 19.2.0 supports simplified API scanning by directly consuming OpenAPI (Swagger) and Odata API definitions.

Releases

Release

Size

Date

P-Cisco_Firepower 1..0.0.0

10.6 KB

|

Sep 10, 2019

More info Less info

Product compatibility

ArcSight ESM

Version 6.8 · 6.11.0 · 6.9.1

Version 7.0 · 7.2 · 7.3 · 7.1 · 7.4 · 7.5 · 7.6 · 7.7 · 7.8

Release notes

This version of Activate P-Cisco Firepower provides events for the following use cases:

Perimeter Monitoring

High Volume of Deny Events to Same Destination
Multiple Deny Events from Same Source
Multiple Deny Events to Same Destination
Multiple Denies and an Allow from Same Source

Network Monitoring

DoS Activity Detected by IDS
Exploit Attempt Detected by IDS
High Severity IDS Event
Multiple Exploit Attempts from Same Source
Multiple Exploit Attempts to Same Destination
Multiple IDS Events from Same Source
Multiple IDS Events to Same Destination
Multiple Sources Generating the Same IDS Event
Multiple Unique IDS Events to Same Destination
Privilege Escalation Attempt Detected
Reconnaissance Activity Detected by IDS
Unique IDS Events from Same Source
Very High Severity IDS Event
Unique IDS Events to Same Destination

Entity Monitoring

User Account Brute Force Attempt
User Account Brute Force Attempt from Multiple Sources
User Account Brute Force Attempt Reported by Device

Languages

English

Files

(10.6 KB)

Resources

Documentation

Activate License

Activate Wiki

Activate Framework Installation and Configuration

Your browser is not supported!

Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox

release-rel-2024-4-1-6117 | Wed Apr 10 01:16:06 PDT 2024