We love to hear your ideas for improving Sentinel.

 
25 Ideas
of 190
38 Comments
79 Votes
  • Completed

    10

    Add customizable message banner at login

    In the same way people get a message banner warning that they are going to see sensitive data and will be liable for misuse of resources, so should we support adding a ...

    Comments (2) | by: Jean-Paul G. | over a year ago | Last activity over a year ago | Status changed over a year ago | Dashboards/Visualizations
  • Completed

    1

    AirMagnet Enterprise Collector

    AirMagnet Enterprise is an IDS that generates events. Sentinel needs to consume those events.

    Comments (1) | by: Ted E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    1

    ipfix collector

    IPFIX (IP Flow Information Export) is a protocol that Sentinel needs to be able to gather events from.

    Comments (1) | by: Ted E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    1

    SFlow Collector

    SFlow is common from many vendors such as Alcatel, Foundry and others. Customers need to be able to consume these events.

    Comments (1) | by: Ted E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    1

    J-Flow collector

    Customers need to be able to collect IP flow events

    Comments (1) | by: Ted E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    1

    Box Collector

    Customers need to collect events from the BOX Cloud service.

    Comments (1) | by: Ted E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    1

    Hadoop collector

    With the use of the new connection to the ArcSight Smart Connector, we are happy to announce that this interface is now certified and available for use with Sentinel. ...

    Comments (1) | by: Ted E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    2

    Aruba collector

    I'd like to request a collector for Aruba WiFi controller

    Comments (1) | by: Erno P. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    3

    Barracuda Spam Firewall Collector

    Barracuda Email Security Gateway is one of the best Spam Firewall and almost every other customer is using it. I always have hard times doing POC as competitor has the ...

    Comments (2) | by: Muhammad S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    1

    Vormetric DSM collector

    Thales Vormetric Data Security Manager is already integrated with the top SIEM solutions. So I think, that there should be collector in the Sentinel for that already.

    Comments (2) | by: Jakub M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    10

    Cisco Firesight should support syslog

    Hi, One of our customers, ACCELYA WORLD S L U, logged the below with us: --- We need to handle events from cisco firesight version 6.x, but we see that the specific ...

    Comments (3) | by: Srinivas R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    3

    Micro Focus should have a AWS collector

    Microfocus should have an AWS collector. Here's AWS page that describes their logging https://aws.amazon.com/answers/logging/centralized-logging/

    Comments (3) | by: Pekka L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    2

    Proofpoint email protection collector

    Proofpoint email protection is a market leader in this space. With no Sentinel Collector, that's a significant blindspot of device and user activity in our network.

    Comments (2) | by: Richard M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    3

    New plug-in for watchguard XTM Firewalls

    Watchguard is a growning firewall enterprise and we have many clients with rhis boxes, a really good idea is to generate a new plug-in for parsing this logs.

    Comments (0) | by: Ted E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    1

    Make dynamic lists easier to manage

    Dynamic lists are a very important tool for bringing variable data into correlation rules. But it is hard to use. Plus, when you're modifying a dynamic list, you don't ...

    Comments (0) | by: Ted E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Completed

    1

    Easy way to integrate with threat reputation services and data

    Sentinel needs a way for the administrator to configure integrations to threat reputation sources. These sources typically supply IP addresses with threat scores to let ...

    Comments (0) | by: Ted E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    5

    STIX/TAXII data ingestion

    Be able to take in STIX/TAXII data by automate-able means and map fields to such as MD5 to a MD5 field in sentinel. With the current feeds model, you typically import ...

    Comments (3) | by: cameron s. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    1

    New correlation rule operator: Not match subnet

    Hi, Currently in Sentinel it is quite impossible to create whitelist correlation rules with TargetIP. We have a use case that requires if TargetIP does not match certain ...

    Comments (2) | by: Timo S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Completed

    3

    AD parser should parse "Service Name" from event "A Kerberos service ...

    Hi, I think AD parser need an enhancement. It should parser "Service Name" from event "A Kerberos service ticket was requested". Usually that field contains an account ...

    Comments (2) | by: Timo S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Completed

    2

    Fortianalyzer collector

    Many Prospects and Customers uses Fortianalyzer to centralize events from Firewall. The actual collector is not able to read events from FortiAnalyzer

    Comments (1) | by: Ted E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations