FileZilla Server

Version: FileZilla Server version 1.6.7 and above

The FileZilla program is a free-to-use, open-source FTP (File Transfer Protocol) utility, that allows the users to transfer files from a local to a remote computer. The FileZilla Server software is used for transferring files over a network.

Netsurion Open XDR manages logs retrieved from FileZilla Server via Windows Agent Log File Monitor (LFM). The alerts, reports, dashboards, and saved searches in Netsurion Open XDR are enhanced by capturing important and critical activities in FileZilla Server.

The following are the key assets available in this Data Source Integration.

Alerts

TypeNameDescription
SecurityFileZilla – Suspicious activities detectedGenerated when specific GNU TLS error codes are detected in the FileZilla Server.
SecurityFileZilla – User authentication failure detectedGenerated when a user authentication failure attempt event is detected in the FileZilla Server.

Reports

TypeNameDescription
SecurityFileZilla – User authentication failure eventsProvides details about user authentication failure events detected in the FileZilla Server.
SecurityFileZilla – User authentication eventsProvides details about all user authentication events detected in the FileZilla Server.
SecurityFileZilla – File transfer eventsProvides details about file transfer events detected in the FileZilla Server.

Dashboards

TypeNameDescription
SecurityFileZilla – User authentication eventsDisplays FileZilla Server user authentication events.
SecurityFileZilla – GNU error codesDisplays the GNU error codes returned by the FileZilla Server.
SecurityFileZilla – FTP response codesDisplays FTP response codes returned by FileZilla Server.
SecurityFileZilla – FTP transfer events by file typeDisplays all FileZilla Server file transfer events.

Saved Searches

TypeNameDescription
SecurityFileZilla – User authentication failure eventsProvides details about user authentication failure events detected in the FileZilla Server.
SecurityFileZilla – User authentication eventsProvides details about all user authentication events detected in the FileZilla Server.
SecurityFileZilla – File transfer eventsProvides details about file transfer events detected in the FileZilla Server.

Documentation

The configuration details are consistent with Netsurion Open XDR 9.3 and later, and FileZilla Server.

Download the Integration Guide for configuration instructions and more information.