New Bundles for May 2016

bundle

#1

The following 4 new bundles were posted to the ExtraHop Bundles Gallery in May. You can apply bundles to your ExtraHop to customize your platform via custom dashboards, triggers, and alerts. If you have an idea for a bundle, feel free to submit it in the Bundles Discussion forum. Have a bundle ready? Submit it to the Bundles Gallery.

#Device Discovery
Submitted by @apax

Identify newly discovered devices from ExtraHop as soon as they begin communicating on a network. This is useful for accounting when devices were introduced into an environment, such as when identifying rogue systems like “linksys” or unauthorized dhcp servers.

Discuss this bundle
View bundle details and download (customer login required)

#CVE-2015-7547 getaddrinfo
Submitted by @blood

This bundle provides a trigger and dashboard that help to detect attempts to exploit CVE-2015-7547, a vulnerability within the getaddrinfo function from the GNU glibc library.

Discuss this bundle
View bundle details and download (customer login required)

#Web App Bundle
Submitted by @jfry

This dashboard monitors a multi-tiered web application. Get immediate status of your load balancers, application servers, and database servers using this dashboard. Read the accompanying blog post for more details.

Discuss this bundle
View bundle details and download (customer login required)

#SIP VOIP Call Dashboard
Submitted by @bkauf

This bundle provides insight into the state of SIP sessions by mapping all SIP requests to responses for a given SIP call dialog to track and correlate call setups with call teardowns and failures. You will need to assign the SIP-Sessions trigger to one of your SIP gateway servers. If you’d like visibility for multiple gateway servers in different networks we recommend that you duplicate the triggers, change the application name in them, and make a new dashboard for the additional VOIP network segment you’d like to monitor.

Discuss this bundle
View bundle details and download (customer login required)