We love to hear your ideas for improving Sentinel.

Page 4 
190 Ideas
183 Comments
805 Votes
  • Votes

    5

    Permissions to Security Intelligence Boards

    Changing the permission structure: Now: Only access to all events for a user and permissions to SI boards are possible. If you limit the event view with a filter you ...

    Comments (0) | by: Torsten F. | over a year ago | Last activity over a year ago | Status changed over a year ago | Dashboards/Visualizations
  • Planned

    5

    Forcepoint's web gateways AP-Web collector

    Forcepoint's web gateways AP-Web is well know in this space. With no Sentinel Collector, that's a significant blindspot of device and user activity in our network.

    Comments (1) | by: Richard M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    5

    Extend Feed Frequency Options

    At the moment the minimum Feed frequency is Weekly. Considering IP2Location only updates their databases once a month, this weekly minimum is a waste of resources to ...

    Comments (1) | by: Ben W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    4

    Fix your post 8.2.2.0 installer to require 4 CPUs

    Sentinel 8.2.2.0 will not successfully install on Linux without 4 cores assigned to the box. I recently spent around a week trying to get a clean 8.2.2.0 install to work ...

    Comments (0) | by: Rob M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Installation/Deployment
  • Votes

    4

    Export configuration in clear text

    Customer HELAB need a tool to export the complete configuration in clear text or pdf to have a documentation of their system. This is needed because of regulation ...

    Comments (0) | by: Ulrich S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    4

    Add ability to customize Sentinel report format

    When reports are generated in Sentinel, you do not have a choice of how the report is formatted. For example, customer wants to display data in a bar graph format versus ...

    Comments (0) | by: John G. | over a year ago | Last activity over a year ago | Status changed over a year ago | Dashboards/Visualizations
  • Votes

    4

    Add FQDN host fields

    Currently Sentinel splits fully qualified DNS names into a Hostname and the Domain part. That makes it diffucult to use thread intelligence feeds in dynamic lists, as ...

    Comments (0) | by: Norbert K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    4

    Alphabetical ordering of actions in action manager

    it is sometimes difficult to find an action in Action manager. could be interesting to order alphabeticaly

    Comments (0) | by: david a. | over a year ago | Last activity over a year ago | Status changed over a year ago | Dashboards/Visualizations
  • Votes

    4

    Every JDBC database log source requires their own collector --> One ...

    Hi, Currently JDBC database implementation needs a collector per single logsource. Even if the query is the same between servers. The offset value seems to be stored in ...

    Comments (2) | by: Timo S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    4

    Kaspersky Security Center Collector

    Kaspersky is one of the Top 5 Security Solutions on the market. Collectors for McAfee, Sophos, Symantec, Trend Micro exist, the creation of a Kaspersky Security Center ...

    Comments (3) | by: Jan R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    4

    Support security features provided by SNMP v3

    Authentication in SNMP v1 and v2 is nothing but community string sent in clear text. SNMPv3 does not use community strings, but uses password based authentication and ...

    Comments (3) | by: Srinivas R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    4

    Samba v2 and v3 support in file connector

    File connector should be able to use SMB v2 and v3.

    Comments (5) | by: Piotr P. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    4

    Syslog over TCP needs to recognize NULL characters as message ...

    Some products like Juniper Netscreen use NULL character as a Syslog message delimiter. Our Syslog connector does not treat NULL char as a delimiter and as a result, ...

    Comments (1) | by: Pradeep K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    4

    webhelper to interact with REST api from collectors and actions

    If one wants to interact with Sentinel's REST api a https connection need to be established and authenticated. This can be cumbersome from an action or collector and ...

    Comments (2) | by: Norbert K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Installation/Deployment
  • Votes

    4

    Use Email lists in correlation events

    If you have multiple recipients for correlation event alarms, you have to create from CC's action manager an action for each recipient or add multiple addresses to the ...

    Comments (2) | by: Jari V. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    4

    notification on alert creation or owner change

    there should be an option to notify the owner if an alert is assigned.

    Comments (4) | by: Norbert K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    4

    Sentinel User Permissions for Web Interface and REST API procedure ...

    A recent investigation into the automation of creating new event source objects within Sentinel via external sources has revealed that the permissions necessary to invoke ...

    Comments (2) | by: Ted E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    4

    Support IPv6 through and through

    Instead of hacking the system, such as TID 7016555, to make any use of IPv6, Sentinel should not only accept IPv6 syntaxes, but store and parse them in such a way that ...

    Comments (0) | by: Ben W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    3

    Better LDAP integration

    Currently the LDAP integration is extremely basic. It requires far too much work to get it to work with an LDAP load balancer. The best LDAP integrations automatically ...

    Comments (0) | by: Rob M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    3

    MSG Field size to 16kB

    The message field size should be bigger. Some of custom log event sources require bigger msg size.

    Comments (0) | by: Timo S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Installation/Deployment