When you configure Click Studios Passwordstate to send log data to USM Appliance, you can use the Passwordstate plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin.
Device | Details |
---|---|
Vendor | Click Studios |
Device Type | Network Access Control |
Connection Type | Syslog |
Data Source Name | Passwordstate |
Data Source ID | 1880 |
Integrating Click Studio Passwordstate
Before you configure the Passwordstate integration, you must have the IP address of the USM Appliance Sensor.
To configure Passwordstate to send syslog messages to USM Appliance
- From the Passwordstate web interface, click System Settings.
- Open the Proxy & Syslog Servers tab.
- Configure the Syslog Server with your USM Appliance IP address and and Syslog Port as 514.
Plugin Enablement
For plugin enablement information, see Enable Plugins.
Additional Resources and Troubleshooting
https://www.clickstudios.com.au/downloads/version9/Passwordstate_Security_Administrators_Manual.pdf
For troubleshooting, refer to the vendor documentation: