Trend Micro InterScan Integration

Trend Micro InterScan

Version: Trend Micro InterScan 6.5.

Trend Micro™ InterScan™ Web Security Virtual Appliance 6.5 is a secure web gateway that combines application control with zero-day exploit detection, advanced anti-malware scanning, real-time web reputation and flexible URL filtering, to provide superior Internet threat protection.

Netsurion Data Source Integration for Trend Micro InterScan 6.5 allows you to monitor the following components:-

Operations - Syslog messages for different services, account operations (addition, deletion and modification of user and group) and shutdown/restarting of system.
Security - Suspicious network activities, if there is any change in privileges on user logon/authentication activities (logon, logoff).
Compliance - Changes in policy configuration (addition and deletion).

Once Trend Micro InterScan is configured to deliver events to Netsurion Manager; alerts, dashboards and reports can be configured into Netsurion.

Some of the Data Source Integrations available in Netsurion are listed below.

Alerts

Type	Name	Description
Operations	Trend Micro InterScan - Policies added	This alert is generated when any sort of policies have been added from Trend Micro InterScan.
Operations	Trend Micro InterScan - Policies deleted	This alert is generated when any sort of policies have been deleted from Trend Micro InterScan.

Reports

Type	Name	Description
Security	Trend Micro InterScan - User logon success	This report provides information related to trusted URL added which includes User Name from fields.
Operations	Trend Micro InterScan - Trusted URL added	This report provides information related to trusted URL added which includes User Name, trusted URL list from fields.
Operations	Trend Micro InterScan - Trusted URL added to exception	This report provides information related to trusted URL added to exception which includes User Name,Exception Trust List from fields.
Compliance	Trend Micro InterScan - HTTP inspection policy added	This report provides information related to HTTP inspection policy added which includes User Name, http inspection policy added from fields.
Compliance	Trend Micro InterScan - HTTP DLP policy added	This report provides information related to HTTP DLP policy added which includes User Name, http dlp policy added from fields
Compliance	Trend Micro InterScan - URL filter policy added	This report provides information related to URL filtering policy which includes User Name, URL filter policy added from fields.
Compliance	Trend Micro InterScan - Digital certificates management	This report provides information related to digital certificate management which includes User Name, digital certificate management from fields.
Compliance	Trend Micro InterScan - FTP DLP global policy changes	This report provides information related to FTP DLP global policy change which includes User Name, FTP DLP global policy change from fields.

Documentation

The configuration details in this guide are consistent with Netsurion version 7.X and later,Trend Micro InterScan 6.5.

Download Integration Guide for more information.