In last couple of years, security teams have faced challenges with increasing work from home scenarios where they lack visibility as well as control over what devices are accessing their network and if they're secure. Adding to the complexity is the myriad point products generally needed to gain this visibility and control. The Opswat Meta Access Platform is a comprehensive solution that gives your organization a secure network access and deep endpoint compliance. For more information, see https://www.opswat.com/products/metaaccess.
In NetWitness, we have integrated the opswat metaaccess platform events through opswat_metaaccess plugin log collection and events are collected in JSON format. The plugin is now published to the NetWitness Live. There is also a method to forward events from Opswat Meta Access to an AWS s3 bucket. This method is supported in Netwitness S3 Universal integration
Customers should enable opswat log parser in NetWitness log decoder to parse the collected events. We support parsing of admin, device, device report and webhook events from opswat in the parser.
Documentation:
- NetWitness opswat metaaccess plugin: https://community.netwitness.com/t5/netwitness-platform-integrations/opswat-metaaccess-cloud-event-source-log-configuration-guide/ta-p/694651
- OPSWAT official doc: https://docs.opswat.com/macloud-sdp/developer-guide/integration-guidelines
