Seculert
The JSA DSM for Seculert collects events from the Seculert cloud service.
The following table describes the specifications for the Seculert DSM:
Specification |
Value |
---|---|
Manufacturer |
Seculert |
DSM name |
Seculert |
RPM file name |
DSM-SeculertSeculert-JSA_version-build_number.noarch.rpm |
Supported versions |
v1 |
Protocol |
Seculert Protection REST API Protocol |
Recorded event types |
All malware communication events |
Automatically discovered? |
No |
Includes identity? |
No |
Includes custom properties? |
No |
More information |
Seculert website (https://www.seculert.com) |
To integrate Seculert with JSA, complete the following steps:
-
Download and install the most recent version of the following RPMs from the Juniper Downloads onto your JSA Console:
-
Protocol-Common
-
DSM-DSMCommon
-
Seculert DSM RPM
-
SeculertProtectionRESTAPI PROTOCOL RPM
-
Add a Seculert log source on the JSA Console. The following table describes the parameters that require specific values for Seculert event collection:
Table 2: Seculert Log Source Parameters Parameter
Value
Log Source type
Seculert
Protocol Configuration
Seculert Protection REST API
API Key
32 character UUID
For more information about obtaining an API key, see Obtaining an API Key.