Trend Micro InterScan

Version: Trend Micro InterScan 6.5.

Trend Micro™ InterScan™ Web Security Virtual Appliance 6.5 is a secure web gateway that combines application control with zero-day exploit detection, advanced anti-malware scanning, real-time web reputation and flexible URL filtering, to provide superior Internet threat protection.

Netsurion Data Source Integration for Trend Micro InterScan 6.5 allows you to monitor the following components:-

  • Operations – Syslog messages for different services, account operations (addition, deletion and modification of user and group) and shutdown/restarting of system.
  • Security – Suspicious network activities, if there is any change in privileges on user logon/authentication activities (logon, logoff).
  • Compliance – Changes in policy configuration (addition and deletion). 

Once Trend Micro InterScan is configured to deliver events to Netsurion Open XDR Manager; alerts, dashboards and reports can be configured into Netsurion Open XDR.

The following are the key Data Source Integration available in Netsurion Open XDR.

Alerts

Type Name Description
Operations Trend Micro InterScan – Policies added This alert is generated when any sort of policies have been added from Trend Micro InterScan.
Operations Trend Micro InterScan – Policies deleted This alert is generated when any sort of policies have been deleted from Trend Micro InterScan.

Reports

Type Name Description
Security Trend Micro InterScan – User logon success This report provides information related to trusted URL added which includes User Name from fields.
Operations Trend Micro InterScan – Trusted URL added This report provides information related to trusted URL added which includes User Name, trusted URL list from fields.
Operations Trend Micro InterScan – Trusted URL added to exception This report provides information related to trusted URL added to exception which includes User Name,Exception Trust List from fields.
Compliance Trend Micro InterScan – HTTP inspection policy added This report provides information related to HTTP inspection policy added which includes User Name, http inspection policy added from fields.
Compliance Trend Micro InterScan – HTTP DLP policy added This report provides information related to HTTP DLP policy added which includes User Name, http dlp policy added from fields
Compliance Trend Micro InterScan – URL filter policy added This report provides information related to URL filtering policy which includes User Name, URL filter policy added from fields.
Compliance Trend Micro InterScan – Digital certificates management This report provides information related to digital certificate management which includes User Name, digital certificate management from fields.
Compliance Trend Micro InterScan – FTP DLP global policy changes This report provides information related to FTP DLP global policy change which includes User Name, FTP DLP global policy change from fields.

Documentation

The configuration details in this guide are consistent with Netsurion Open XDR 7.x and later,Trend Micro InterScan.

Download Integration Guide for configuration instructions and more information.