Accellion Secure File Transfer Integration

Accellion SFT

Version : Accellion SFT

Accellion SFT (kiteworks) provides enterprise users, a powerful and secure access to the content.

With an integrated environment, users can work seamlessly on different platforms ranging from desktop, tablet to smartphone - an environment where employees are always connected.

Netsurion's Open XDR platform helps to monitor events from Accellion SFT. Its dashboard, alerts and reports will help you to track login activities, login failure, file and folder activities and configuration changes to keep you informed about the systems and its activities. It will trigger alert whenever any login fails, and if any file/folders are deleted.

Netsurion Data Source Integration for Accellion SFT allows you to monitor the following components:-

Security: User Login Failed, File/Folder deleted, DLP flagged/locked a file
Operations: User Management, File Management, Folder Management, Admin Activity, Password Management
Compliance: User Login and Logout

The configuration details are consistent with Netsurion version 9.x and later, and Accellion SFT

Alerts

Type	Name	Description
Security	Accellion SFT - Login Failed	This alert is generated when any login failure is detected in Accellion SFT.
Security	Accellion SFT - File/Folder Deleted	This alert is generated when any file/folder is deleted.
Security	Accellion SFT - DLP flagged/locked a file	This alert is generated when any file/folder is flagged by DLP or locked.

Reports

Type	Name	Description
Security	Accellion SFT - User Login Failed	This report gives information related to all login failure detected in Accellion SFT. Report contains username, source IP and activity details along with other useful information.
Operations	Accellion SFT - User Management	This report gives information about all the user management activities like add user, reactivate user, delete user, user type change, etc. Report contains username, source IP, activity type and activity details along with other useful information.
Operations	Accellion SFT - File Management	This report gives information about all the actions performed on files. Report contains username, source IP, activity type like add, modify, delete, recover, quarantine, lock, etc., activity details and other useful information.
Operations	Accellion SFT - Folder Management	This report gives information about all the actions performed on folders. Report contains username, source IP, activity type like add, delete, recover, update. Etc. and activity details which can be useful for further analysis.
Operations	Accellion SFT - Password Management	This report gives information about all the password related activities such as password update, reset, etc. Report contains username, source IP, activity type and details along with other useful information.
Operations	Accellion SFT - Admin Activity	This report gives information about all the admin activities performed such as system setting switched, add ldap source, application settings changed, edit client, etc. Report contains admin username, source IP, activity type and details and other useful information.
Compliance	Accellion SFT - User Login and Logout	This report gives information related to all the login and logout activity detected in Accellion SFT. Report contains username, source IP and activity details along with other information.

Documentation:

Download Integration Guide and How-to Guide for more information and to configuration instructions.