Pulse Connect Secure

Formerly named Juniper SA, Pulse Connect Secure is an SSL VPN solution that gathers large amounts of event data about your network and users.

Before You Begin

In order to setup this event source in InsightIDR, you must first configure it to send syslog to the InsightIDR collector. You can find instructions here: https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB22227.

How to Configure This Event Source

  1. From your dashboard, select Data Collection on the left hand menu.
  2. When the Data Collection page appears, click the Setup Event Source dropdown and choose Add Event Source.
  3. From the “Security Data” section, click the VPN icon. The “Add Event Source” panel appears.
  4. Choose your collector and event source. You can also name your event source if you want.
  5. Choose the timezone that matches the location of your event source logs.
  6. Optionally choose to send unparsed logs.
  7. Configure your default domain and any Advanced Event Source Settings.
  8. Select Listen on Network Port. Enter the port you used for your syslog configuration.
    • Optionally choose to Encrypt the event source if choosing TCP by downloading the Rapid7 Certificate.
  9. Click Save.