The SCMID in the unique identifier for each SGBox machine. It’s necessary to generate the license or open a ticket with the SGBox support On Deploy Machine Web Interface Wizard The Wizard is displayed and the SCMID is shown. VM Console SCMID could also be shown the fist time you deploy the OVF template. After […]
Log in to SGBox using an Strong Authentication This article explains how to configure SGBox to use Strong Authentication during the user login. SGBox use Google Authentication as authentication provider. Loging to the SGBox Web interface: Go to SCM > Users > Users Create new local user, in our example: user: otpuser pass: Pass1234 Enable […]
The Sensors A sensor can be used alternatively to correlation rule (see this section) when the number of occurrences is high.Sensors detect when a large number of events repeating in a time interval and alert the admin when a specific threshold exceeded. Sensor in the other hand is less flexible than a correlation rule. Requirements: […]
The multi-events correlation rules A correlation rule is used to alert the admin when an event, or a series of events, occur in a specified time range.In order to create a multi-events rule following requirements are needed: Requirements: A mail server must be configured. Look Configure a Mail server section to see how to configure […]
How to configure Apache web server In this article is explained how to configure Apache web server in both Linux & Windows systems in order to log on SGBox all the related information. Linux systems: You need to edit yout virtual configuration file, in our case “default-ssl.conf” vi /etc/apache2/sites-enabled/default-ssl.conf Change the CustomLog value as follow: […]
Change the test script This section explains how to modify some test script’s arguments. Requirements: At least one test script must be configured. Look at this section to create a test script Connect to SGBox web interface and navigate to SCM > SM > View > Host. The check’s results are shown. In our case […]
Reset OpenVAS Web Interface password from WebUI This article explains how to change the OpenVAS password on collectors version 5. Connect to the collector on port 4000: https://192.168.2.103:4000 user: admin pass: admin Go in the top right corner and select My Settings Click on Edit My Settings Enter the current admin’s password and type the […]
Version 5 New S.O. based on Ubuntu Fast Data Access New Data Management Strong Data Encryption Improved Correlation Engine Automatic Vendors Recognition Version 4 S.O. based on Ubuntu Strong Data Encryption Correlation Engine
Microsoft CA This article will explain how to create a Microsoft CA in order to use LDAPS protocol and access to SGBox with your AD Users. It’s not mandatory have a Microsoft CA to use LDAPS protocols, you can use also an External CA. The only requirements is that SGBox is able to solve the […]
Profiles and Vendors (logs auto recognition) With version 5.1.0 a new concept has been introduced: logs auto recognition and categorization. SGBox already recognizes many different log sources, and up to v5.0.7 user needed to associate the collected logs to the desired patterns to extract events. Pre-defined classes are now associated to known vendors, and by […]