Azure MFA On-Premise

Version: Azure MFA.

Microsoft Azure Multi-Factor Authentication (MFA) prompts the users during the sign-in process for an additional verification (two forms of identification), such as to enter a code on cellphone or to provide a fingerprint scan.

Netsurion Open XDR helps to monitor events from Azure MFA On-Premise. Its dashboard, alerts and reports will help you to authenticate events keeping you informed about the system and its activities. Alerts are triggered whenever authentication failure is detected.

Netsurion Data Source Integration for Azure MFA allows you to monitor the following components.

  • Security– Authentication Failure
  • Operation – Authentication Success

After the Azure Multi-Factor Authentication is configured to deliver events to the Netsurion Open XDR, the dashboards and reports can be configured into Netsurion Open XDR.

The following are the key Data Source Integration available in Netsurion Open XDR.

Alerts

Type Name Description
Security Azure MFA – Authentication Failure This alert is generated when any authentication failure is detected by Azure MFA.

Reports

Type Name Description
Security Azure MFA – Authentication Failure This report gives information related to all the authentication failure detected by Azure MFA. Report contains username, source IP, guide, call status along with other useful information.
Operations Azure MFA – Authentication Success This report gives information related to all the successful authentication detected by the Azure MFA. Report contains username, source IP, guide, call status along with other useful information.

Documentation

The configuration details are consistent with Netsurion Open XDR 9.x or later, and Azure Multi-Factor Authentication.

Download Integration Guide and How-to Guide for configuration instructions and more information.