diff --git a/docs/xdr/features/collect/integrations/network/olfeo_secure_web_gateway.md b/docs/xdr/features/collect/integrations/network/olfeo_secure_web_gateway.md new file mode 100644 index 0000000000..38b96da69b --- /dev/null +++ b/docs/xdr/features/collect/integrations/network/olfeo_secure_web_gateway.md @@ -0,0 +1,42 @@ +uuid: 924470a7-ab0f-49e9-a9c2-d8d15c4fe78f +name: Olfeo Secure Web Gateway +type: intake + +## Overview + +Olfeo Secure Web Gateway is a web gateway offering malware detection, threat prevention and reputation filtering. +This product is supported by Olfeo. + + +{!_shared_content/operations_center/detection/generated/suggested_rules_924470a7-ab0f-49e9-a9c2-d8d15c4fe78f_do_not_edit_manually.md!} + +{!_shared_content/operations_center/integrations/generated/924470a7-ab0f-49e9-a9c2-d8d15c4fe78f.md!} + +## Configure + +This setup guide will show you how to forward your Olfeo Secure Web Gateway logs +to Sekoia.io by means of a syslog transport channel. + +### Prerequisites + +- Have an internal log concentrator + +### Enable Syslog forwarding + +To enable syslog forwarding: + +1. Log in your Olfeo web interface. +2. Go to `Parameters > Monitoring > Syslog.`. +3. Click on `add a syslog` button. +4. Add `label, description and server adress`. +5. Click on `Create`. + +Olfeo forward syslogs in UDP on port 514. You must setup your internal log concentrator to listen on this port and forward logs to Sekoia.io. + +### Create the intake + +Go to the [intake page](https://app.sekoia.io/operations/intakes) and create a new intake from the format `Olfeo Secure Web Gateway`. + +### Forward logs to Sekoia.io + +Please consult the [Syslog Forwarding](../../../ingestion_methods/sekoiaio_forwarder/) documentation to forward these logs to Sekoia.io. \ No newline at end of file diff --git a/mkdocs.yml b/mkdocs.yml index 25e0077568..01f9e63522 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -232,6 +232,7 @@ nav: - Mc Afee/Skyhigh Secure Web Gateway: xdr/features/collect/integrations/network/skyhigh_secure_web_gateway.md - Microsoft Always On VPN: xdr/features/collect/integrations/network/microsoft_always_on_vpn.md - NetFilter: xdr/features/collect/integrations/network/netfilter.md + - Olfeo Secure Web Gateway: xdr/features/collect/integrations/network/olfeo_secure_web_gateway.md - OPNSense: xdr/features/collect/integrations/network/opnsense.md - Palo Alto Next-Generation Firewall: xdr/features/collect/integrations/network/paloalto.md - pfSense: xdr/features/collect/integrations/network/pfsense.md