This document is intended to provide overall technical information and configuration information for Kron PAM’s SIEM (Security Information and Event Management) server and Syslog server.

Learn how to configure Kron PAM's SIEM and Syslog servers for seamless log management. Discover the various options available, including UDP or TCP protocols for log transmission, forwarding Syslog packets to preset servers, and customizing settings like 

Solution Overview

Log Format

SIEM Server and Log Parameters Set up

SIEM Log Configuration

SIEM Log Monitoring

Session Log

CommandLog_Command

CommandLog_Keylog

CommandLog_FileTransfer

CommandLog_Ocr

Event  Log

Script Player Log

Vault Discover New Users

Auth Log

TACACS Log

HTTP Proxy Log

Threat Analytics Log

Log Formats

APPENDIX 1: Event Types

SIEM and Syslog Integration

Quick LDAP/AD Integration

Proxy and GUI Authentication with Auth-Service

Adding Users Automatically

Triggering LDAP Sync Job Manually

High Availability for Domains

Authentication with Auth-Service and TACACS+

Enabling LDAP for Azure AD DS

Locking Down LDAP Access Over the Internet

Integrate with Active Directory/LDAP Users

Integrate with ITSM

Integrate with Jenkins

Overview

Key Benefits

Kron PAM Configuration

Credential Provider Plugin

Add Kron PAM as a Credential Store

Create Assets in Orchestrator

Using Assets in Workflows

UiPath Configuration

Conclusion

Integrate with UiPath

Credential Management for Authenticated Scans

Description Field as the Password Vault Integration Indicator

Dynamic Password Update Flow for Standard Scanning Accounts

Dynamic Password Update Flow for Privilege Escalation Accounts

Integrate with Tenable Security Center (Nessus)

System Architecture

Integration with Apache Tomcat

Integration with IBM WebSphere Application Server

Integration with IBM WebSphere Liberty

Security Considerations

Integrate with Apache Tomcat and IBM WebSphere

Adding Passwords to Password Vault

Creating Application Token

Configuring Passwords for UCMDB on Kron PAM

Configuring the Kron PAM Extension Before Uploading to UCMDB

Uploading Kron PAM Extension to OpenText UCMDB

Configuring UCMDB Credentials

Integrate with OpenText UCMDB

Integrate with Ansible

Use One Time Password (OTP) in External Apps

Agent Cache Mechanism

AAPM Agent Screen

AAPM Agent Installation in Linux Environments

AAPM Agent Installation in Windows Environments

Agent Installation in Operation Systems

AAPM Agent Logs

Add Account

Add Application Token

Kron PAM Password Vault

Using Java SDK

Using .Net SDK

Using PHP SDK

Using Python SDK

Using C++ SDK

Using AAPM Agent SDKs

Installing AAPM Agent

Password Service

Sidecar Container

Test Application

Using AAPM Agent on Kubernetes and OpenShift Platforms

AAPM Agent with SDKs and Container
Orchestration Environments

Integration Guides

Kron PAM How-to Guides

1.8.2 Configure Monitoring & Alarm

Configure Remote Desktop App

Configure Assigned Credential Feature

Configure Password Management on Web-Based Applications

Configure Hardware Tokens

Configure Tamper-Proof Logging

Manage Web Service Accounts with API

Changing Master Key

Enable HTTPS for Web Portal

Enable TLSv1.3 At HTTP Proxy

Configuration Guides

Create Your Own Report with Reporting Module

Data Model Dictionary

Run Security Audit Compliance Reports

Reporting Guides

How-To Guides