Citrix NetScaler Application Firewall is a comprehensive security solution ICSA-certified web application that blocks known and unknown attacks against web and web services applications. NetScaler supports a good range of AppFirewall security controls that can be customized as needed. But what do you do, when you want to have aggregated view of these violations with graphical analysis?
Command Center collects this AppFw system logs generated on NetScaler appliance, produce complete graphics and supply of integrated reports to provide a view of the image that violations are generated.
steps to get these reports on the Command Center Device is very simple. In this blog, we'll cover all the configurations that must be made on NetScaler for the generation of report on Command Center. In a word, simply configure Command Center as Syslog server on NetScaler and you're just one login below to see violations on the Command Center configuration
NOTE :. In this blog, we assume that you have configured on the device configuration AppFirewall NetScaler
Just to give you an overview, here's how the process of how to generate reports AppFw Command Center.
Step 1: Setting Command Center as Syslog server
Command Center AppFw reports based on data collected from syslog NetScaler. To have some sort of AppFw reports generated on Command Center, the first and foremost step is to ensure the availability of the NetScaler appliance control center. To do this, we need to configure Command Center as audit server appliance NetScaler. This will redirect the syslog product on the NetScaler Command Center device.
As we can see, Figure 1 shows the steps to configure Command Center as syslog server appliance NetScaler NetScaler via GUI. When creating audit server, ensure that the Audit Type is selected as SYSLOG
2nd step:. Audit Policy Configuration
In this step, you must create a policy said . Go to Application Firewall >> Policies >> Audit in the navigation pane on the left. Select Policies tab next to the Server . Click Add mentioned at the bottom of the window. Select Type Audit as SYSLOG and Server as Command Center syslog server configured in step 1 and click Create . This Verification Policy defines the type and protocol Server definition defines what the papers are sent when
Step 3 .: Binding overall, the audit policy
After setting the verification Policy , you will need to link the audit policy at the global level to ensure Registration for all events AppFw NetScaler system. To do this, select the defined strategy, click Global Bindings (shown at the bottom of the window) and click insertion policy to select the defined audit strategy defined step 2. Click OK
NOTE :. Save the configuration made so far on the NetScaler appliance with Save (mentioned at the top right of the window).
Step 4: Connect to Command Center
now, the last and most important step is to connect to the device Command Center, go to reports thento Scoreboard AppFirewall and see violations generated on NetScaler are also reflected on AppFirewall Dashboard Command Center :.)
with these simple steps you will be able to generate and synchronize violations generated on NetScaler and violations reflected in these graphs.
Note that the dashboard will begin to fill the data from the time that you configure all of step 1 to step 3 just starting. It will not report violations on Command Center before these installation configurations are performed.
0 Komentar