Forcepoint CASB

Forcepoint CASB Logo

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Solutions Index


Attribute Value
Publisher Community
Support Tier Community
Support Link https://github.com/Azure/Azure-Sentinel/issues
Categories domains
Version 3.0.2
Author Forcepoint
First Published 2022-05-19
Solution Folder Forcepoint CASB
Marketplace Azure Marketplace · Popularity: ⚪ Very Low (9%)
Pre-requisites Common Event Format

The Forcepoint CASB (Cloud Access Security Broker) Solution for Microsoft Sentinel allows you to automatically export CASB logs and events into Microsoft Sentinel in real-time. This enriches visibility into user activities across locations and cloud applications, enables further correlation with data from Azure workloads and other feeds, and improves monitoring capability with Workbooks inside Microsoft Sentinel.

For more details about this solution refer to integration documentation.

This solution is dependent on the Common Event Format solution containing the CEF via AMA connector to collect the logs. The CEF solution will be installed as part of this solution installation.

NOTE: Microsoft recommends installation of CEF via AMA Connector. The existing connectors were deprecated on Aug 31, 2024.

Contents

Pre-requisites

This solution depends on 1 other solution(s):

Solution
Common Event Format

Data Connectors

This solution has 2 discovered data connector(s)⚠️ (not in Solution definition):

Connectors from dependency solutions:

🔍 Discovered: This item was discovered by scanning the solution folder but is not listed in the Solution JSON file.

Tables Used

This solution uses 1 table(s):

Table Used By Connectors Used By Content
CommonSecurityLog Common Event Format (CEF) (dependency), Common Event Format (CEF) via AMA (dependency), [Deprecated] Forcepoint CASB via AMA, [Deprecated] Forcepoint CASB via Legacy Agent Workbooks

Content Items

This solution includes 1 content item(s):

Content Type Count
Workbooks 1

Workbooks

Name Tables Used
ForcepointCASB CommonSecurityLog

Release Notes

Version Date Modified (DD-MM-YYYY) Change History
3.0.2 27-11-2024 Removed Deprecated Data Connectors
3.0.1 15-07-2024 Deprecating data connectors
3.0.0 31-08-2023 Addition of new Forcepoint CASB AMA Data Connector

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Solutions Index