Netgear Prosafe

Version : Netgear prosafe GS748Tv5 switch

Netgear prosafe Web Managed Switches (previously called Prosafe Unmanaged Plus Switches) are an upgrade from unmanaged switches. Prosafe Web Managed Switches are plug-and-play for easy deployment, supports additional configuration and monitoring features using a web browser-based GUI.

Netsurion Open XDR collects the event logs delivered from Netgear prosafe for creating reports, dashboard and alerts. Among the event types, we are considering: Login failure, Login success, Link up/down and authentication failure etc. Netsurion Open XDR helps you to visualize the Netgear prosafe activities in the dashboard. Netsurion Open XDR triggers alert whenever a login attempt/ authentication by a user fails.

Netsurion monitors all the Netgear prosafe events which are given below.

  • Security – Login failure, Authentication failure etc.
  • Operation – Link status (up/down).
  • Compliance– Login success.

Once events are received into Netsurion Open XDR; reports, knowledge objects, categories and dashboards can be configured into Netsurion Open XDR.

The following are the key Data Source Integration available in Netsurion Open XDR.

Alerts

Type Name Description
Security Netgear prosafe – Login failed This alert is generated when a user fails to login. We can identify a brute force attack when any IP or any host has multiple login failures within half an hour.
Security Netgear prosafe – Authentication failed This alert is generated when the user is unable to pass authentication. Using this alert, we can track authentication failure and account compromise detection, abnormal authentication attempts, off-hour authentication attempts, etc.

Reports

Type Name Description
Security Wireless Switch – Access control list This category based report provides information related to access control list manager error.
Security Netgear prosafe – Login failure This report provides detailed information related to a user login failure. Using this report, we can find which user has failed to login and on which system he/she is trying to login.
Operations Netgear prosafe – Link status This report provides detailed information related to interface numbers, link status (Link up/down) etc.
Compliance Netgear prosafe – Login success This report provides detailed information related to user login success. Using this report, we can find out the username, login time, computer name and from which IP-address user is connected.

Documentation:

The configurations detailed are consistent with Netsurion Open XDR 9.x and later, and Netgear Prosafe.

Download Integration Guide and How-to Guide for configuration instructions and more information.