Adding Kaspersky CyberTrace as an event source in FortiSIEM

This section describes how to add Kaspersky CyberTrace as an event source in FortiSIEM.

To add Kaspersky CyberTrace as an event source:

1. Open the FortiSIEM web console.
2. Select Admin > Device Support > Device/App.
3. Click New.

   The Device/Application Type Definition window opens.

4. Specify the following information:
   • In the Category field, select Application.
   • In the Vendor field, specify Kaspersky.
   • In the Model field, specify CyberTrace.
   • In the Version field, specify ANY.
   • In the Device/App Group field, select Applications > Infrastructure App item.
   • Do not change the Biz Service Group field.
   • Clear any selected items from the drop-down list of the Access Protocol field.

   

   Editing a device/application type definition

5. Click Save.

   A new item appears in the list of supported devices and applications.

6. Click Apply.

For more information about supporting devices and applications, visit http://help.fortinet.com/fsiem/5-1-1/Online-Help/HTML5_Help/Working_with_Devices_and_Applications.htm.