Azure MFA On-Premise
Version: Azure MFA.
Microsoft Azure Multi-Factor Authentication (MFA) prompts the users during the sign-in process for an additional verification (two forms of identification), such as to enter a code on cellphone or to provide a fingerprint scan.
Netsurion Open XDR helps to monitor events from Azure MFA On-Premise. Its dashboard, alerts and reports will help you to authenticate events keeping you informed about the system and its activities. Alerts are triggered whenever authentication failure is detected.
Netsurion Data Source Integration for Azure MFA allows you to monitor the following components.
- Security– Authentication Failure
- Operation – Authentication Success
After the Azure Multi-Factor Authentication is configured to deliver events to the Netsurion Open XDR, the dashboards and reports can be configured into Netsurion Open XDR.
The following are the key Data Source Integration available in Netsurion Open XDR.
Alerts
| Type | Name | Description |
|---|---|---|
| Security | Azure MFA – Authentication Failure | This alert is generated when any authentication failure is detected by Azure MFA. |
Reports
| Type | Name | Description |
|---|---|---|
| Security | Azure MFA – Authentication Failure | This report gives information related to all the authentication failure detected by Azure MFA. Report contains username, source IP, guide, call status along with other useful information. |
| Operations | Azure MFA – Authentication Success | This report gives information related to all the successful authentication detected by the Azure MFA. Report contains username, source IP, guide, call status along with other useful information. |
Documentation
The configuration details are consistent with Netsurion Open XDR 9.x or later, and Azure Multi-Factor Authentication.
Download Integration Guide and How-to Guide for configuration instructions and more information.