NetIQ eDirectory Integration

NetIQ eDirectory

Version: NetIQ eDirectory (Previously known as Novell eDirectory) v8.8 SP7 or later.

eDirectory is a highly scalable, high-performing, secure directory service. It can store and manage millions of objects, such as users, applications, network devices, and data. Novell eDirectory offers a secure identity management solution that runs across multiple platforms, is internet-scalable, and extensible.

Netsurion's Open XDR platform that seamlessly combines SIEM, Log Management, File Integrity Monitoring, machine Analytics and so forth. It is designed to address an ever-changing landscape of threats and challenges, with a full suite of high-performance tools for security, compliance, and operations. Netsurion delivers comprehensive, useful and actionable insight into what is really going on in and around an enterprise IT environment.

Netsurion Data Source Integration for eDirectory allows you to monitor following:-

Account Management events.
Authentication events.
Role Management events.
Service or application events.
System Events.
Data Item or Resource Element events.

After the eDirectory is configured to deliver events to the Netsurion's Open XDR platform, the dashboards and reports can be configured into Netsurion's Open XDR platform.

Some of the Data Source Integrations available in Netsurion are listed below.

Alerts

Type	Name	Description
Security	eDirectory - Account created	This alert is generated when an account is created.
Security	eDirectory - Authentication failed	This alert is generated when a user authentication failed.
Security	eDirectory - Role created	This alert is generated when create a new role, or an attempt is made to create a new role.
Security	eDirectory - Role deleted	This alert is generated when an existing role is deleted, or an attempt is made to delete an existing role.
Security	eDirectory - Service disabled	This alert is generated when a service, operation or function is disabled..
Security	eDirectory - System shutdown	This alert is generated when a service, operation or function is enabled.

Reports

Type	Name	Description
Security	eDirectory - Account created	This category based report provides information about created accounts.
Security	eDirectory - Account deleted	This category based report provides information about deleted accounts.
Security	eDirectory - Account disabled	This category based report provides information about disabled accounts.
Security	eDirectory - Access token created	This category based report provides information about created access tokens.
Security	eDirectory - Authentication failed	This category based report provides information about user authentication failures.
Security	eDirectory - Session authenticated	This category based report provides information about user authenticated sessions.
Security	eDirectory - Peer association created	This category based report provides information about to new peer association creations.
Security	eDirectory - Peer association destroyed	This category based report provides information when a existing peer association is destroyed.
Security	eDirectory - Role created	This category based report provides information related to create a new role, or an attempt is made to create a new role.
Security	eDirectory - Role deleted	This category based report provides information when an existing role is deleted, or an attempt is made to delete an existing role.
Security	eDirectory - Service terminated	This category based report provides information about terminated services.

Documentation

The configuration details are consistent with Netsurion's Open XDR platform version 7.x or later, and NetIQ eDirectory v8.8 SP7 or later.

Download Integration Guide for more information.