Cisco Expressway
Version: Cisco Expressway
Cisco Expressway offers users outside the firewall simple, yet highly secure access to all collaboration workloads, including video, voice, content, IM, and presence. It helps in collaborating with people who are on the third-party systems and endpoints and people in other companies.
Netsurion Open XDR helps to monitor events from Cisco Expressway. Its dashboard, alerts and reports will help you to track Authentication activities, Call activities and configuration changes to keep you informed about the system and its activities. It will trigger alerts whenever any authentication fails and if any security related attack is detected by Cisco Expressway.
Netsurion Data Source Integrations for Cisco Expressway allows you to monitor the following components:
- Security: Authentication failures, Security Alert
- Operation: Call Activities, Configuration Changes
- Compliance: Authentication Success
The following are the key Data Source Integration available in Netsurion Open XDR.
Alerts
| Type | Name | Description |
|---|---|---|
| Security | Cisco Expressway: Authentication Failure | This alert is generated when user fails to login. |
| Security | Cisco Expressway: Security Alert | This alert is generated when any security related attack is detected. |
Reports
| Type | Name | Description |
|---|---|---|
| Security | Cisco Expressway: Authentication Failure | This report gives information regarding all the authentication failures detected in Cisco Expressway. Report contains IP address, event type, username and other details for further analysis. |
| Security | Cisco Expressway: Security Alert | This report gives information about all the security related attack detected in Cisco Expressway. Report contains event type, event detail and other details about the security alert. |
| Operations | Cisco Expressway: Call Activity | This report gives information about all call activities detected in Cisco Expressway such as Call connected, rejected, disconnected, rerouted, etc. Report contains IP address, event type, call-ID, service, call authentication and other details. |
| Operations | Cisco Expressway: Configuration Changes | This report gives information about all the Configuration changes made. Report contains Event details, Node and PID of the event and other details. |
| Compliance | Cisco Expressway: Authentication Success | This report gives information about all the successful authentication detected in Cisco Expressway. Report contains IP address, username, event type, and other details. |
Documentation
The configuration details are consistent with Netsurion Open XDR 9.x and later, and Cisco Expressway.
Download Integration Guide and How-to Guide for configuration instructions and more information.