Imperva Incapsula v1.1.13

Uses Incapsula to manage sites and IPs

Author:
Cortex XSOAR
Support:
xsoar
URL:
https://www.paloaltonetworks.com/cortex
agentixxsiam
Network Security

Integrations (1)

Modeling rules (1)

README

Imperva Incapsula (Cloud WAF)

This pack includes Cortex XSIAM content.

<~XSIAM>

Configuration on Server Side

To setup a real-time SIEM log integration via AWS S3 push, follow the Set up log integration process.

Collection via AWS S3

To create or configure Incapsula log collection via S3, use the information described here.

You can configure the AWS S3 collector:

  1. Navigate to Settings > Data Sources > Add Data Source (Optional) > Amazon S3.
  2. Make sure to add the following values to the configuration:
    • Log Type - Generic
    • Log Format - CEF
    • Vendor - Auto-Detect
    • Product - Auto-Detect
      </~XSIAM>