Version : Netgear prosafe GS748Tv5 switch
Netgear prosafe Web Managed Switches (previously called Prosafe Unmanaged Plus Switches) are an upgrade from unmanaged switches. Prosafe Web Managed Switches are plug-and-play for easy deployment, supports additional configuration and monitoring features using a web browser-based GUI.
Netsurion Open XDR collects the event logs delivered from Netgear prosafe for creating reports, dashboard and alerts. Among the event types, we are considering: Login failure, Login success, Link up/down and authentication failure etc. Netsurion Open XDR helps you to visualize the Netgear prosafe activities in the dashboard. Netsurion Open XDR triggers alert whenever a login attempt/ authentication by a user fails.
Netsurion monitors all the Netgear prosafe events which are given below.
- Security – Login failure, Authentication failure etc.
- Operation – Link status (up/down).
- Compliance– Login success.
Once events are received into Netsurion Open XDR; reports, knowledge objects, categories and dashboards can be configured into Netsurion Open XDR.
The following are the key Data Source Integration available in Netsurion Open XDR.
|Security||Netgear prosafe – Login failed||This alert is generated when a user fails to login. We can identify a brute force attack when any IP or any host has multiple login failures within half an hour.|
|Security||Netgear prosafe – Authentication failed||This alert is generated when the user is unable to pass authentication. Using this alert, we can track authentication failure and account compromise detection, abnormal authentication attempts, off-hour authentication attempts, etc.|
|Security||Wireless Switch – Access control list||This category based report provides information related to access control list manager error.|
|Security||Netgear prosafe – Login failure||This report provides detailed information related to a user login failure. Using this report, we can find which user has failed to login and on which system he/she is trying to login.|
|Operations||Netgear prosafe – Link status||This report provides detailed information related to interface numbers, link status (Link up/down) etc.|
|Compliance||Netgear prosafe – Login success||This report provides detailed information related to user login success. Using this report, we can find out the username, login time, computer name and from which IP-address user is connected.|
The configurations detailed are consistent with Netsurion Open XDR 9.x and later, and Netgear Prosafe.