topic RE: Integration of Kaspersky security solution with Extreme Networks through the Distributed IPS Connect module in ExtremeCloud IQ- Site Engine Management Center

Integration of Kaspersky security solution with Extreme Networks through the Distributed IPS Connect module

Antonio_Opromol — Wed, 08 Nov 2017 18:32:00 GMT

I've made a quick lab on the integration between the Kaspersky security solution and the Extreme Networks solution using the Distributed IPS connect module present on the EMC server.

I share with you my lab results and settings.

For my lab environment I've used:
Extreme Management Center (EMC) version 8.0.3.53
ExtremeControl version 8.0.3.53
Kaspersky Security Center (KSC) version 10.4.343
Kaspersky Endpoint Security (KES) 10 SP2 for Windows version 10.3.0.6294

First of all we need to configure our Kaspersky Security Center in manner to export via syslog the relevant security events to EMC server.
To do this, in the Events section of KSC we need to configure the export events section, as the following

(Thanks to Leo Lam of Extreme Networks for his help on the regular expressions)

we can manage in the proper way these events too

In similar manner is possible to manage every type of events of other software of the Kaspersky Security solution, and react with EMC to these.

Antonio

RE: Integration of Kaspersky security solution with Extreme Networks through the Distributed IPS Connect module

Kurt_Semba — Wed, 08 Nov 2017 18:39:00 GMT

great work Antonio and thanks for sharing!

RE: Integration of Kaspersky security solution with Extreme Networks through the Distributed IPS Connect module

Drew_C — Wed, 08 Nov 2017 21:44:00 GMT

This is great! Thanks for posting!

RE: Integration of Kaspersky security solution with Extreme Networks through the Distributed IPS Connect module

Zdeněk_Pala — Fri, 10 Nov 2017 14:28:00 GMT

wow. cool thanks for sharing!

RE: Integration of Kaspersky security solution with Extreme Networks through the Distributed IPS Connect module

Steffi — Tue, 11 Dec 2018 16:31:00 GMT

Did anyone save Antonios Screenshots?

RE: Integration of Kaspersky security solution with Extreme Networks through the Distributed IPS Connect module

Antonio_Opromol — Tue, 11 Dec 2018 17:09:00 GMT

Hi Steffi,

here you are some of the screenshot above that I've found in a my old email.
I hope helps you for customize this integration.

RE: Integration of Kaspersky security solution with Extreme Networks through the Distributed IPS Connect module

Steffi — Tue, 11 Dec 2018 17:10:00 GMT

Thank you Antonio!