Symantec Cloud Secure Web Gateway Event Collector

Palo Alto Networks Symantec Cloud Secure Web Gateway Event Collector integration for Cortex XSIAM.

Analytics & SIEM · Symantec Cloud Secure Web Gateway

Details

IDSymantec Cloud Secure Web Gateway Event Collector
ProviderBroadcom
CategoryAnalytics & SIEM
From Version8.2.0
Docker Imagedemisto/python3:3.12.13.10116658
Supported ModulesAgentix XSIAM

README

Palo Alto Networks Symantec Cloud Secure Web Gateway Event Collector integration for XSIAM.

Configure Symantec Cloud Secure Web Gateway Event Collector in Cortex

Parameter Required
Server URL True
User name True
Password True
Trust any certificate (not secure) False
Use system proxy settings False
Fetch interval in seconds. The minimum threshold is 30 seconds. True

Configuration parameters

  • url — Server URL (required)
  • credentials — User name (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • longRunning — Long Running Instance
  • fetch_interval — Fetch interval in seconds. The minimum threshold is 30 seconds. (required)

Commands (0)

This integration defines no commands.

Source

SymantecCloudSecureWebGatewayEventCollector.py SymantecCloudSecureWebGatewayEventCollector_test.py SymantecCloudSecureWebGatewayEventCollector.yml SymantecCloudSecureWebGatewayEventCollector_description.md
Download History Raw 
## Symantec Cloud Secure Web Gateway Event Collector
Use this integration to collect operation logs from Symantec Cloud Secure Web Gateway.

In order to use this integration, you need to enter your Symantec Cloud Secure Web Gateway credentials in the relevant integration instance parameters.


### To obtain API Key:
Create a User API Key that serves as the username and password in the Sync API syntax.

1. In Service Mode, select **Account Maintenance** > **MDM, API Keys**.
2. Create a username/password key.
3. In the API section (bottom half of the screen), click **Add API Key**.
4. Define a Username and Password. The username must be unique as it used by the Web Security Service. If the Web Security Service detects any other API with the same name, the service displays an error message and you must define another name.
5. Click **Add**.