NetMotion Mobility

Applies to: NetMotion Mobility

Overview

NetMotion Mobility is a mobile VPN software, designed specifically for wireless environments. NetMotion Mobility provides IT managers with the security and centralized control to effectively manage a mobile deployment.

EventTracker, when integrated with NetMotion Mobility, collects log from NetMotion Mobility and creates a detailed reports, alerts, dashboards and saved searches. This KP (knowledge Pack) provides detailed information about the User logon failure, in real time. It is helpful to investigate and take responsive actions against Brute-Force Attack.

EventTracker provides a thorough information about policies such as pending policies that must be applied and the policies that have been applied. It also provides information related to Proxy events which contain many important information such as source user, source IP address and session ID. Sessions can be monitored to identify details of user logon and logoff success required for Auditing.

Alerts are provided for critical events such as user logon failure to identify logon attempt. Using the EventTracker’s Dashboards we can view and monitor events like user logon events (success, failed), user policy details, user/group management, etc.

EventTracker Knowledge Pack for NetMotion allows you to monitor the following components: -

Security– Login failures.
Operation – Proxy Activities, Directory Activities, etc.
Compliance – Login and Logout failure, Policies, etc.

Previous Next

Compliance

Reports

NetMotion – Login Logout Events: This report generates a summary of login and logout events generated by NetMotion Mobility. It includes username, roles of the user group the user belongs to, and the action performed i.e. login or logout.
NetMotion - Directory Activity – This report generates a summary of Directory activities. It includes username, group on which the action was taken and the status.

Operations

Reports

NetMotion – Policy Activities – This report contains a summary of Policy activities. It includes the username, device on which the policy was applied and the name of the policy along with the message regarding the status.
NetMotion – Proxy Event: This report has a summary of Proxy Activities. This includes hostname, session ID, Message, source IP address and the username.

Security

Alerts

NetMotion: Login Failure – This alert is triggered when the NetMotion Mobility detects a login failure event.

Reports

NetMotion – Login Failed: This report generates a summary of login failure events. It includes information such as username, hostname and the reason for login failure.

Scope

The configuration details in these guides are consistent with EventTracker version 9.X and later, and NetMotion Mobility.

Documentation:

To configure NetMotion Mobility to send logs to EventTracker, refer to the How-to Guide.

For more information please refer to the Integration guide.