Export of Device Posture user events into SIEM systems
The Device Posture service events are exported to Security Information and Event Management (SIEM). This allows you to view the following user events associated with the Device Posture service in your SIEM:
- All event types related to Device Posture service.
- Device Posture evaluation events, which provide information about the evaluation of a device’s posture against the defined policies.
The following are the benefits of exporting events into SIEM systems:
- Enables your Security Operations teams to correlate, analyze, and search data from disparate logs.
- Helps your Security Operations teams to identify and quickly remediate the security risks.
- Visibility of security alerts in a centralized place.
- Centralized approach to detect potential security threats for organizational risk analysis capabilities such as risk indicators, user profiles, and risk scores.
- Ability to combine and correlate the Citrix Analytics risk intelligence information of a user account with the external data sources connected within your SIEM.
For more information, see the following topics:
Export of Device Posture user events into SIEM systems
In this article
Copied!
Failed!