{"product_id":"watchguard-siemfeeder","title":"WatchGuard SIEMFeeder","description":"\u003cp\u003eThe \u003cstrong\u003eWatchGuard SIEMFeeder\u003c\/strong\u003e is a cloud-delivered service that sends enriched \u003cstrong\u003eendpoint security telemetry\u003c\/strong\u003e from your \u003cstrong\u003eWatchGuard Endpoint Security\u003c\/strong\u003e deployment straight into your existing \u003cstrong\u003eSIEM platform\u003c\/strong\u003e. Before delivery, SIEMFeeder takes the data and enriches it with security intelligence, then creates a single data flow to a compatible SIEM server. This gives your security team far deeper visibility of the processes running across your workstations and servers, helping to detect unknown threats, targeted attacks and advanced malware.\u003c\/p\u003e\u003cp\u003eSIEMFeeder acts as the link between the protection software on your company computers and your SIEM server. It does not make any changes to the settings of a monitored computer or network, and it operates within the Endpoint Security infrastructure. Logs are collected using the WatchGuard \u003cstrong\u003eEvent Importer\u003c\/strong\u003e application, which can save them to a local or remote folder, or forward them to a \u003cstrong\u003esyslog\u003c\/strong\u003e or \u003cstrong\u003eApache Kafka\u003c\/strong\u003e server.\u003c\/p\u003e\u003cp\u003e\u003cspan style=\"\"\u003eChoose the band that matches your number of users and the term, then set the quantity to your number of users.\u003c\/span\u003e\u003c\/p\u003e\u003cp\u003e\u003cstrong\u003eKey Features\u003c\/strong\u003e\u003c\/p\u003e\u003cul\u003e\n\u003cli\u003eEnriches endpoint process data with WatchGuard security intelligence before it reaches your SIEM\u003c\/li\u003e\n\u003cli\u003eCentralised endpoint management through WatchGuard Cloud\u003c\/li\u003e\n\u003cli\u003eEasy to install and configure\u003c\/li\u003e\n\u003cli\u003eEvent filtering prior to integration into the SIEM tool, helping to reduce SIEM storage costs\u003c\/li\u003e\n\u003cli\u003eConfigurable log format: \u003cstrong\u003eLEEF\u003c\/strong\u003e or \u003cstrong\u003eCEF\u003c\/strong\u003e (logs are sent in LEEF by default)\u003c\/li\u003e\n\u003cli\u003eSecure event download over TLS connections\u003c\/li\u003e\n\u003cli\u003eFlexible delivery via a shared folder, syslog server or Apache Kafka server\u003c\/li\u003e\n\u003cli\u003eService retains undelivered logs for up to seven days (up to 80 GB per customer) to help prevent data loss during connectivity failures\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003eIdeal for\u003c\/strong\u003e: IT security specialists, SOC teams, managed security service providers (MSSPs) and organisations of any size that already run a SIEM and want richer endpoint visibility from WatchGuard Endpoint Security.\u003c\/p\u003e\u003cp\u003e\u003cstrong\u003eCompatible Products\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eSIEMFeeder is available with \u003cstrong\u003eWatchGuard EDR\u003c\/strong\u003e, \u003cstrong\u003eEndpoint Security Prime\u003c\/strong\u003e, \u003cstrong\u003eEndpoint Security 360\u003c\/strong\u003e and \u003cstrong\u003eEndpoint Security Elite\u003c\/strong\u003e. You need as many active SIEMFeeder licences as you have licences for these endpoint products.\u003c\/p\u003e\u003cp\u003e\u003cstrong\u003eCompatible SIEM Platforms\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eAny SIEM that supports CEF or LEEF is compatible. WatchGuard's documented supported servers include AlienVault Unified Security Management (USM), Fortinet FortiSIEM, HPE ArcSight, IBM QRadar, McAfee Enterprise Security Manager, LogRhythm, SolarWinds Log \u0026amp; Event Manager and Splunk.\u003c\/p\u003e\u003cp\u003e\u003cstrong\u003eFAQs\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003e\u003cstrong\u003eWhich SIEM platforms does WatchGuard SIEMFeeder work with?\u003c\/strong\u003e\u003cbr\u003eIt works with any SIEM that can manage events in CEF or LEEF format and ingest them through a syslog server, a Kafka server or a shared folder. Documented examples include Splunk, IBM QRadar, HPE ArcSight, AlienVault USM and LogRhythm.\u003c\/p\u003e\u003cp\u003e\u003cstrong\u003eWhich WatchGuard products does SIEMFeeder require?\u003c\/strong\u003e\u003cbr\u003eYour computers must be protected by WatchGuard EDR, Endpoint Security Prime, Endpoint Security 360 or Endpoint Security Elite, with matching SIEMFeeder licences.\u003c\/p\u003e\u003cp\u003e\u003cstrong\u003eHow do I receive the logs?\u003c\/strong\u003e\u003cbr\u003eYou install WatchGuard Event Importer on a computer in your network. It downloads the log files from the Microsoft Azure infrastructure and saves them to a folder or sends them to a syslog or Apache Kafka server.\u003c\/p\u003e\u003cp\u003e\u003cstrong\u003eWhich log formats are supported?\u003c\/strong\u003e\u003cbr\u003eLogs are sent in LEEF format by default. CEF format is available on request to WatchGuard.\u003c\/p\u003e\u003cp\u003e\u003cstrong\u003eWhat are the Event Importer hardware requirements?\u003c\/strong\u003e\u003cbr\u003eA 1 GHz or faster processor and a minimum of 512 MB RAM, plus free disk space for the log data. On average, Event Importer uses 1 MB of storage per computer, per hour.\u003c\/p\u003e","brand":"WatchGuard","offers":[{"title":"1 - 50 \/ 1 Year","offer_id":63454253285516,"sku":"WGSIEM30101","price":13.3,"currency_code":"AUD","in_stock":true},{"title":"1 - 50 \/ 3 Years","offer_id":63454253318284,"sku":"WGSIEM30103","price":32.16,"currency_code":"AUD","in_stock":true},{"title":"1 - 50 \/ 5 Years","offer_id":63454253351052,"sku":"WGSIEM30105","price":53.14,"currency_code":"AUD","in_stock":true},{"title":"51 - 100 \/ 1 Year","offer_id":63454253383820,"sku":"WGSIEM30201","price":11.9,"currency_code":"AUD","in_stock":true},{"title":"51 - 100 \/ 3 Years","offer_id":63454253416588,"sku":"WGSIEM30203","price":28.67,"currency_code":"AUD","in_stock":true},{"title":"51 - 100 \/ 5 Years","offer_id":63454253449356,"sku":"WGSIEM30205","price":47.54,"currency_code":"AUD","in_stock":true},{"title":"101 - 250 \/ 1 Year","offer_id":63454253482124,"sku":"WGSIEM30301","price":10.5,"currency_code":"AUD","in_stock":true},{"title":"101 - 250 \/ 3 Years","offer_id":63454253514892,"sku":"WGSIEM30303","price":25.17,"currency_code":"AUD","in_stock":true},{"title":"101 - 250 \/ 5 Years","offer_id":63454253547660,"sku":"WGSIEM30305","price":41.95,"currency_code":"AUD","in_stock":true},{"title":"251 - 500 \/ 1 Year","offer_id":63454253580428,"sku":"WGSIEM30401","price":9.38,"currency_code":"AUD","in_stock":true},{"title":"251 - 500 \/ 3 Years","offer_id":63454253613196,"sku":"WGSIEM30403","price":22.37,"currency_code":"AUD","in_stock":true},{"title":"251 - 500 \/ 5 Years","offer_id":63454253645964,"sku":"WGSIEM30405","price":37.76,"currency_code":"AUD","in_stock":true},{"title":"501 - 1000 \/ 1 Year","offer_id":63454253678732,"sku":"WGSIEM30501","price":7.99,"currency_code":"AUD","in_stock":true},{"title":"501 - 1000 \/ 3 Years","offer_id":63454253711500,"sku":"WGSIEM30503","price":19.57,"currency_code":"AUD","in_stock":true},{"title":"501 - 1000 \/ 5 Years","offer_id":63454253744268,"sku":"WGSIEM30505","price":32.16,"currency_code":"AUD","in_stock":true},{"title":"1001 - 5000 \/ 1 Year","offer_id":63454253777036,"sku":"WGSIEM30601","price":6.99,"currency_code":"AUD","in_stock":true},{"title":"1001 - 5000 \/ 3 Years","offer_id":63454253809804,"sku":"WGSIEM30603","price":16.78,"currency_code":"AUD","in_stock":true},{"title":"1001 - 5000 \/ 5 Years","offer_id":63454253842572,"sku":"WGSIEM30605","price":27.97,"currency_code":"AUD","in_stock":true},{"title":"5001+ \/ 1 Year","offer_id":63454253875340,"sku":"WGSIEM30701","price":6.02,"currency_code":"AUD","in_stock":true},{"title":"5001+ \/ 3 Years","offer_id":63454253908108,"sku":"WGSIEM30703","price":14.69,"currency_code":"AUD","in_stock":true},{"title":"5001+ \/ 5 Years","offer_id":63454253940876,"sku":"WGSIEM30705","price":24.49,"currency_code":"AUD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0598\/0304\/1932\/files\/WGSIEM30101_5245031fbb4cb34c460aacdf0291124834c7c9669373ce292a6bc08c2e294c84.jpg?v=1792724070","url":"https:\/\/thetechgeeks.com\/products\/watchguard-siemfeeder","provider":"The Tech Geeks Australia","version":"1.0","type":"link"}