The SecureSphere MX-Toolbox is a general purpose repository for custom packages, integrations, and monitoring add-ons for the SecureSphere MX and Gateway appliances.
- Alerts to New Relic - Send alerts to New Relic via custom action set
- Camo CX-Discover Integration - Process CAMO classification .csv report to create table groups, and convert to json to push to S3
- ServiceNow Integration - Alert to incident, change control reconciliation audit enrichment, close-the-loop updating change requests with queries, and vulnerability assessment export to CMDB and vulnerable items in ServiceNow
- Export KRP Rules to Dataset - Export KRP rules in the siote tree to .csv and upload to data set
- Export WAF Profile Learned Hosts to CSV - Export all learned hosts in web profiles to .csv
- Export Table Groups to CSV - Export table groups to .csv
- MX WAF Security Policy Sync - Replicate and sync security policies across multiple MXs in AWS
- MX and Gateway Performance Monitoring - Output performance data (CPU, counters, network stats, disk, etc) from both MX and Gateway appliances in near real-time simultaneously to new relic, influxdb/grafana, and/or to SIEM via syslog with uniquely indexed json.
- DB Login to Dataset - Alert on multiple logged in db sessions from separate IPs per DB user in real-time