Sending Kaspersky Industrial CyberSecurity for Networks events to third-party systems

 

Kaspersky Industrial CyberSecurity for Networks

 
 
 

Sending Kaspersky Industrial CyberSecurity for Networks events to third-party systems

Back to article list
Latest update: January 18, 2021 ID: 14618
 
 
 
 

The article concerns:

  • Kaspersky Industrial CyberSecurity for Networks version 2.9
  • Kaspersky Industrial CyberSecurity for Networks version 2.8
  • Kaspersky Industrial CyberSecurity for Networks version 2.7
 
 
 
 

When configuring event types, you can specify third-party systems to which the events will be sent. These systems are called recipients. Kaspersky Industrial CyberSecurity for Networks (KICS) allows sending the information about events to a SIEM server and to several recipients simultaneously.

Recipients have the following adjustable parameters:

  • Name, which is displayed in the title of the column in the Configure events tab.
  • Recipient type. For SIEM servers, you can set the address and port.

Content and order of the events sent to the SIEM server recipients can differ from the information displayed in the Events tab.

Parameters for limiting the maximum number of sent events are applied to the events registered by Kaspersky Industrial CyberSecurity for Networks. If the event contains the information about several network interactions, then the event is divided into several entries (for each network interaction). This is why the recipient's list can contain more entries than set by the parameter that limits the maximum number of entries.

 
 
 
 
 

How to add a recipient

 
 
 
 
 

How to change the recipient settings

 
 
 
 
 

How to configure sending events to a third-party system

 
 
 
 
 

How to remove a recipient

 
 
 
 
 

How to check if the events are sent to a third-party system correctly (on the example of HP ArcSight)

 
 
 
 
 

Format of messages sent to SIEM servers

 
 
 
 
Was this information helpful?
Yes No
Thank you
 

 
 

How can we improve this article?

Your feedback will be used for content improvement purposes only. If you need assistance, please contact technical support.

Submit Submit

Thank you for your feedback!

Your suggestions will help improve this article.

OK