Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This allows the generation or selection of the certificate you would like to use with the web UI, as well as managing certificate verification level when communicating with SAM and with network destinations to secure the events you are sending to the destination SIEM.

Certificates and their associated private keys are obtained using the Microsoft Certificate Store on the local computer. They are retrieved from the Personal certificate folder and can be viewed using the Certificate snap in Microsoft Management Console. The friendly name of certificates created is Intersect Alliance Certificate

...

Network Destination Certificate Verification. The ability to certify the chain of trust when connecting to a remote destination server.  Select the level of certificate verification:

  • Accept Any - Require an SSL/TLS certificate to be presented, but accept the certificate even if the chain of trust cannot be authenticated, or the hostname does not match the presented certificate. This is ideal for self signed certificates.
  • Strict Checking - Require an SSL/TLS certificate to be presented, and have both a valid chain of trust and also a hostname matching the certificate. A hostname must be provided in the associated input field, as an IP address will not work.

Snare Agent Manager Certificate Verification. The ability to certify the chain of trust when connecting to a remote Snare Agent Management server. Select the level of certificate verification:

  • Accept Any - Require an SSL/TLS certificate to be presented, but accept the certificate even if the chain of trust cannot be authenticated, or the hostname does not match the presented certificate. This is ideal for self signed certificates.
  • Strict Checking - Require an SSL/TLS certificate to be presented, and have both a valid chain of trust and also a hostname matching the certificate. A hostname must be provided in the associated input field, as an IP address will not work.
Info

Certificate verification is not supported for UDP or TCP.  There will be no validation on these protocols.

...