Solved: Harmony Email & Office Logs in a SIEM

franctorres · ‎2021-08-25

Hi good day... Is there a guide to connect the Harmony Email & Office logs into a SIEM system?

I don´t know if this guide sk146032 apply for SIEMS too.

Regards

PhoneBoy · ‎2021-08-25

Just to provide some context, I'm pretty certain this is for HEO 1.0 (product formerly known as CloudGuard SaaS).
And yes, because this allows export of logs to an on-premise Security Management Server (not Multi-Domain, and not for R81 and above), theoretically this would allow you to use Log Export to put them in a SIEM.
Not sure you can do this for HEO 2.0.

Meanwhile, I know Smart-1 Cloud has specific SKUs to allow for Log Exporter to be run from the cloud.
I believe it also has to be configured by TAC.
There does not appear to be similar SKUs for HEO, however I do know that we are unifying the logs among our Infinity Portal offerings, so there may be a SKU/option for this in the future.

View solution in original post

PhoneBoy · ‎2021-08-25

Just to provide some context, I'm pretty certain this is for HEO 1.0 (product formerly known as CloudGuard SaaS).
And yes, because this allows export of logs to an on-premise Security Management Server (not Multi-Domain, and not for R81 and above), theoretically this would allow you to use Log Export to put them in a SIEM.
Not sure you can do this for HEO 2.0.

Meanwhile, I know Smart-1 Cloud has specific SKUs to allow for Log Exporter to be run from the cloud.
I believe it also has to be configured by TAC.
There does not appear to be similar SKUs for HEO, however I do know that we are unifying the logs among our Infinity Portal offerings, so there may be a SKU/option for this in the future.

franctorres · ‎2021-08-26

Thanks for the response PhoneBoy

Are you a member of CheckMates?

Harmony Email & Office Logs in a SIEM