Activate L1 - Perimeter and Network - Monitoring Indicators (Obsolete)

1

OpenText OpenText Community

App Support Tiers

OpenText SUPPORTED

Support via OpenText Software Support, with a ticket filed against the associated product.

PARTNER

OpenText offers a content partnership program for select partners. Support for Partner Content offerings is provided by the partner and not by OpenText of the OpenText community.

OpenText COMMUNITY

OpenText Community Content is provided by OpenText for the benefit of customers, support for it is not available via OpenText Software Support but through specific community content forums.

COMMUNITY

Community Contributed Content is provided by OpenText customers and supported by them.

EARLY ACCESS

Show less ...Show more

The downloads referenced under the "Cybersecurity Early Access" category are made available to subscribers to mitigate time-critical issues but have not undergone formal quality and performance testing associated with official OpenText/Cybersecurity product releases. OpenText has a multi-stage Quality Assurance process. During Stage 1 we conduct a resource analysis, field mapping, ensure content level 1 functionality and analysis in our sandbox environment. Stage 2 is a complete validation including production validation. This package has cleared Stage 1 validation and therefore should be deployed with the appropriate pre-production validation. OpenText strongly recommends that any downloaded content is first checked and tested thoroughly in a non-production environment before committing to production. We welcome feedback and, should any content be shown to be faulty, detrimental or carry an incorrect claim of authorship, we shall endeavor to remove or correct such content as promptly as reasonably possible once notified and validated.

OpenText | OpenText Community

This package provides the resources for basic Perimeter and Network Monitoring use case requirements.

0 reviews

558 downloads

Product compatibility

ArcSight

CATEGORY

ArcSight | Obsolete Packages

Description
Requirements
Suggested apps
Releases
Resources
Reviews

Have questions about this item?

Contact us
Subscribe to receive update notifications for this item
Subscribe

Description

THIS PACKAGE IS OBSOLETE please see our updated packages:

https://marketplace.microfocus.com/arcsight/content/perimeter-and-network-monitoring-migration-for-l1-only

https://marketplace.microfocus.com/arcsight/content/perimeter-and-network-monitoring-migration-for-l1-and-l2

https://marketplace.microfocus.com/arcsight/content/l1-network-monitoring-indicators-and-warnings

https://marketplace.microfocus.com/arcsight/content/l1-perimeter-monitoring-indicators-and-warnings

This package provides the resources for basic Perimeter and Network Monitoring use case requirements, such as:

Alert on multiple deny/block/drop events from the same attacker
Alert on multiple deny events to the same host
Alert on multiple attackers triggering the same signature
Alert on multiple unique signatures to the same target
Alert on multiple unique signatures from the same attacker
Track Exploit Attempts
Track DoS Activity
Track Recon Activity
Categorize the events within the attack life cycle

Activate L1 - Perimeter and Network - Monitoring Indicators falls under the Activate License

Update: Activate L1 - Perimeter and Network - Monitoring Indicators is now deprecated. Refer to L1-Network Monitoring - Indicators and Warnings and L1-Perimeter Monitoring - Indicators and Warnings for the latest updates.

Minimum Requirements

Activate Base

Suggested apps

Start Rogue Admin Workflow

OpenText

This Novell Sentinel Action allows you to: Start Rogue Admin Workflow.

OpenText COMMUNITY

Voltage SmartCipher

OpenText

SmartCipher transparently encrypts and embeds with access and use controls that protect files wherever they go, enforced by centralized policy management for real-time monitoring, discovery, and classification.

OpenText COMMUNITY

Playbook-Admin Account Check

OpenText

A Playbook for Admin Account Check Usecase

Tripwire IP360

OpenText

This NetIQ Sentinel Collector provides data-capture capabilities for Tripwire IP360 and related products.

IBM zOS

OpenText

This Novell Sentinel Collector provides data-capture capabilities for IBM z/OS and related products.

OpenText COMMUNITY

Playbook-Command and Control Traffic-4

OpenText

A Playbook for Command and Control Traffic Usecase

OpenText COMMUNITY

Playbook-Stolen-Lost Device

OpenText

A Playbook for Stolen/Lost Device Usecase

OpenText COMMUNITY

Playbook-Admin Account Check

OpenText

A Playbook for Admin Account Check Usecase

OpenText COMMUNITY

Playbook-Check IP Reputation from Multiple Sources

OpenText

A Playbook for Check IP Reputation from Multiple Sources Usecase

Releases

Release

Date

THIS PACKAGE IS OBSOLETE please see our updated packages .

Jun 4, 2018

More info Less info

Product compatibility

ArcSight

Version 7.0 · 7.2

Version 6.11

Release notes

THIS PACKAGE IS OBSOLETE please see our updated packages

Languages

English

Resources

Discussion Forum

Activate Framework Installation and Configuration

Activate Wiki

Activate License

Your browser is not supported!

Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox

release-rel-2024-8-3-6225 | Wed Aug 28 17:13:31 PDT 2024