Firewall Monitoring

181340

Micro Focus Micro Focus Community

App Support Tiers

MICRO FOCUS SUPPORTED

Support via Micro Focus Software Support, with a ticket filed against the associated product.

PARTNER

Micro Focus offers a content partnership program for select partners. Support for Partner Content offerings is provided by the partner and not by Micro Focus of the Micro Focus community.

MICRO FOCUS COMMUNITY

Micro Focus Community Content is provided by Micro Focus for the benefit of customers, support for it is not available via Micro Focus Software Support but through specific community content forums.

COMMUNITY

Community Contributed Content is provided by Micro Focus customers and supported by them.

EARLY ACCESS

Show less ...Show more

The downloads referenced under the "ArcSight Early Access" category are made available to subscribers to mitigate time-critical issues but have not undergone formal quality and performance testing associated with official Micro Focus/CyberRes product releases. Micro Focus has a multi-stage Quality Assurance process. During Stage 1 we conduct a resource analysis, field mapping, ensure content level 1 functionality and analysis in our sandbox environment. Stage 2 is a complete validation including production validation. This package has cleared Stage 1 validation and therefore should be deployed with the appropriate pre-production validation. Micro Focus strongly recommends that any downloaded content is first checked and tested thoroughly in a non-production environment before committing to production. We welcome feedback and, should any content be shown to be faulty, detrimental or carry an incorrect claim of authorship, we shall endeavor to remove or correct such content as promptly as reasonably possible once notified and validated.

Micro Focus | Micro Focus Community

The Firewall Monitoring use case has been updated. Firewall Monitoring 1.2 provides improved content and performance, as well as additional resources

1 reviews

1,690 downloads

See previous releases

Product compatibility

ESM ArcSight

CATEGORY

ArcSight

Screenshots
Description
Suggested apps
Releases
Resources
Reviews

Have questions about this item?

Contact us
Subscribe to receive update notifications for this item
Subscribe

Description

06/08/15 - The Firewall Monitoring use case has been updated. Firewall Monitoring 1.2 provides improved content and performance, as well as additional resources:

The dashboards have been improved to help monitor traffic to and from suspicious countries, and monitor real-time device configuration updates in addition to login activity.
Two reports have been added to provide information about traffic to and from suspicious countries.
Additional rules have been added to support the updated dashboards and new reports.

04/15/15 - This Use Case covers abnormal traffic detected by perimeter firewalls. This enables Firewall log analysis for security information and event management tool from ArcSight that collects, analyzes, and reports on enterprise-wide firewalls from any vendor. Firewall Intrusion Monitoring helps you to:

Manage heterogeneous Firewall devices from many vendors and many versions.
Centralized repository for all the collected Firewall logs.
Quick forensics on Firewall logs correlated with user and apps data.
Dashboard and Active Channels for Firewall analytics use case.
Visualize top denied destination ports and hosts.
Analyze failed and successful logins to a Firewall device.
Internal and external traffic on the network that is blocked by a Firewall.

Microfocus ArcSight Connectors supported:

ArcSight Reputation Security Monitoring (RepSM)
Check Point FW-1
Cisco PIX Firewall
Cisco PIX/ASA Syslog, version 8.5, 8.6
F5 BIG-IP Application Security Manager
Juniper Networks (Altor Networks Virtual Firewall)
Juniper Network Security Manager (NetScreen)
Juniper Network Security Manager Syslog, version 2011.4
Juniper Networks Firewall and VPN
Lucent Managed Firewall
McAfee Desktop Firewall
Secure Computing Gauntlet Firewall/ VPN

Suggested apps

Micro Focus COMMUNITY

VPN Monitoring Package

Micro Focus

The VPN Monitoring use case has been updated to address a performance issue.

Micro Focus COMMUNITY

ESM Default Content

Micro Focus

ESM Default Content includes Security Threat Monitoring package and Threat Intelligence Platform package, It also includes resources for tracking Techniques from the MITRE ATT& CK framework.

Micro Focus COMMUNITY

Activate L2 - Perimeter and Network Monitoring - Situat...

Micro Focus

This package provides additional resources for Perimeter and Network Monitoring use case requirements.

Micro Focus COMMUNITY

Brute Force Attack

Micro Focus

The Brute Force Attack use case uncovers and tracks, in real-time, attempts and confirmed attacks using a brute force technique on network assets and applications.

Micro Focus COMMUNITY

L1-Network Monitoring - Indicators and Warnings

Micro Focus

The L1-Network Monitoring - Indicators and Warnings content is focused on network events regarding the traffic and information in transit through the network.

Micro Focus COMMUNITY

Activate L1 - Perimeter and Network - Monitoring Indica...

Micro Focus

This package provides the resources for basic Perimeter and Network Monitoring use case requirements.

Micro Focus COMMUNITY

Anomalous Traffic Detection

Micro Focus

The Anomalous Traffic Detection use case helps you identify sudden spikes in network traffic so that you can detect potentially malicious activity. Sudden spikes in traffic can be caused by scheduled backups or virus scanner updates inside your LAN.

Micro Focus COMMUNITY

Antivirus Monitoring

Micro Focus

The Antivirus Monitoring Security Use Case monitors virus activities in your enterprise and displays them on a dashboard.

Micro Focus COMMUNITY

L2-Network Monitoring - Situational Awareness

Micro Focus

The L2-Network Monitoring - Situational Awareness content is focused on network events regarding the traffic and information in transit through the network and affecting your critical systems.

Releases

Release

Size

Date

Firewall Monitoring 1.2

800.7 KB

|

Aug 13, 2018

More info Less info

Product compatibility

ESM

Version 6.8 · 6.11.0 · 6.9.1

Version 7.0 · 7.2 · 7.3 · 7.4 · 7.5 · 7.6

Release notes

Micro Focus rebranding changes

Languages

English

Files

(800.7 KB)

Firewall Monitoring 1.1

800.4 KB

|

Aug 19, 2015

More info Less info

Product compatibility

ArcSight

Version 7.0 · 7.2

Version 6.11

Release notes

Notes

Languages

English

Files

(800.4 KB)

Resources

Firewall Monitoring 1.2 Security Use Case Guide

Discussion Forum

Your browser is not supported!

Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox

release-rel-2022-5-2-4845 | Wed May 25 03:51:08 PDT 2022