Ubiquiti Access Point
Version : UAP/USW Firmware 3.7.x and above
Ubiquiti UniFi Access Point provides high-performance Wi-Fi. It is a scalable enterprise access point solution designed to be easily deployed and managed. Ubiquiti Access Points are well managed through Ubiquiti UniFi Controller, which is a wireless network management software solution.
Netsurion Open XDR helps to monitor events from UniFi Access Point via syslog. Netsurion Open XDR flex reports, alerts, and dashboards will help you to analyze the activity logs such as, MAC association, MAC disassociation, connection failed from unknown MAC, etc.
After UniFi Controller is configured to deliver Ubiquiti access points events to Netsurion Open XDR Manager; alerts, dashboards, and reports can be configured into Netsurion Open XDR.
The following are the key Data Source Integration available in Netsurion Open XDR.
Alerts
| Type | Name | Description |
|---|---|---|
| Security | Ubiquiti AP – Failed MAC Associations | This alert is triggered when Netsurion receives an event from Ubiquiti flagged as “Probe blocked”. |
Reports
| Type | Name | Description |
|---|---|---|
| Operations | Ubiquiti AP – Failed MAC Associations | This report is a summary of failed MAC associations to any access points which is generally flagged as “Probe blocked”. It contains key field such as log datetime, destination MAC address, failure reason, etc. |
| Operations | Ubiquiti AP – MAC Associations Activities | MAC association activities include events in which destination MAC addresses are flagged as “associated” or “disassociated”. This includes key information, such as log datetime, destination MAC address, source access points MAC address, access point version number, and association status. |
Documentation:
The configuration details are consistent with Netsurion Open XDR 9.x and later, and UAP/USW Firmware 3.7.x and above.
Download Integration Guide and How-to Guide for configuration instructions and more information.