Managed Threat Protection
Back
Managed Threat Protection
EventTracker

Powerful threat prediction, prevention, detection, and response along with compliance in a scalable, simple managed solution.
- Solution Overview Managed Threat Protection
- Platform Details Threat Protection Platform
Key Capabilities
- Security Operations Center
- SIEM
- Endpoint Security
- Threat Detection & Response
- Intrusion Detection
- Vulnerability Management
- Threat Hunting
- Ransomware Protection
- Microsoft 365 Security
- Regulatory Compliance
Business Applications
- Private Equity
- Banking & Financial Services
- Healthcare & Pharmaceutical
- Retail & Hospitality
Secure Edge Networking
Back
Secure Edge Networking

ANNOUNCEMENT

Acumera Acquires Netsurion's Secure Edge Networking.

Whether you have 10 locations or 10,000+, Acumera’s combination of edge computing, networking, security, and 24x7 support gives you the flexibility to manage and scale your distributed networks while unlocking unlimited possibilities for innovation. As network security leaders and edge originators, Acumera combines the immediacy of localized computing with the power of the cloud, enabling real-time computation to deliver value to your business. Read More
Partners
Back
Partners
Partner Program Overview

Accelerate business growth through our award-winning partner program.
- Partner Program Overview
- Managed Service Provider Program
Insights
Back
Insights
Insights
Company
Back
Company
About Us

Knowledge Packs

RSA SecurID

OverviewResources

EventTracker monitors all the RSA SecurID events which are given below.

Security – Admin login failure, a user authentication details, critical system events like (system shutdown, user accessed with insufficient privilege and DOS attack detection, etc.)
Operation – Admin activities, configuration update, policy changes.
Compliance: User authentication success, admin role modification.

Compliance

Reports

RSA SecurID - Admin login activities – This report gives detailed information on console admin login and logout.
RSA SecurID - User authentication activities – This report gives detailed information on authentication user along with the agent and policy.

Operations

Alerts

RSA SecurID: Replication failed - This alert is generated when the port shuts down due to replication failed event occurs.
RSA SecurID: System state change – This alert is generated when the system starts, or shutdown event occurs.

Reports

RSA SecurID - Admin activities – This report gives information about the administrative activity events occurred on RSA authentication manager.
RSA SecurID - Policy details – This report gives detailed information on policy changes, new polices added or deleted.

Security

Alerts

RSA SecurID: Account lockout - This alert is generated when an account lockout event occurs.
RSA SecurID: Authentication failed - This alert is generated when an authentication failure event occurs.
RSA SecurID: Database or directory access failure - This alert is generated when a database access failure event occurs.
RSA SecurID: Passcode reuse - This alert is generated when a passcode reuse event occurs.
RSA SecurID: PIN changed attempt failed - This alert is generated when PIN changed attempt failed event occurs.
RSA SecurID: SMS passcode reuse - This alert is generated when an SMS passcode reuse event occurs.
RSA SecurID: Denial of service attack detected – This alert is generated when RSA detects the DOS attack.
RSA SecurID: Console admin logged in – This alert is generated when the console admin logged event occurs.
RSA SecurID: Console admin logged in – This alert is generated when console admin login failure event occurs.

Reports

RSA SecurID - User authentication failed – This report gives detailed information on user authentication failed with agent details.
RSA SecurID - User account lockout details – This report gives information on user details which were locked due to lockout policy.
RSA SecurID - Critical events-This report gives information on the most critical or important events noticed that occurred in the RSA authentication manager (i.e.) DOS attack detected, the command executed.

Scope

The configuration details are consistent with EventTracker version 9.x and later, and RSA Authentication Manager v8.x or later should be installed.

Documentation:

For more information please refer to the RSA SecurID Integration guide

To configure RSA SecurID to send logs to EventTracker, refer to the How-to Guide.