GPG13 reports and corresponding controls

The following section lists the GPG13 reports and the corresponding controls.

Sr. no Report Name Compliance Mapping
1 GPG13: Accepted VPN Connections - RADIUS PMC2, PMC3, PMC6
2 GPG13: Account Activities on UNIX Servers PMC4, PMC7, PMC9
3 GPG13: Account Activities on Windows Servers PMC4, PMC7, PMC9
4 GPG13: Accounts Changed on NetApp Filer PMC5
5 GPG13: Accounts Changed on UNIX Servers PMC7
6 GPG13: Accounts Changed on Windows Servers PMC7
7 GPG13: Accounts Created on NetApp Filer PMC5
8 GPG13: Accounts Created on NetApp Filer Audit PMC5
9 GPG13: Accounts Created on Sidewinder PMC3, PMC5
10 GPG13: Accounts Created on Symantec Endpoint Protection PMC3, PMC5
11 GPG13: Accounts Created on UNIX Servers PMC7
12 GPG13: Accounts Created on Windows Servers PMC7
13 GPG13: Accounts Deleted on NetApp Filer PMC5
14 GPG13: Accounts Deleted on NetApp Filer Audit PMC5
15 GPG13: Accounts Deleted on Sidewinder PMC3, PMC5
16 GPG13: Accounts Deleted on Symantec Endpoint Protection PMC3, PMC5
17 GPG13: Accounts Deleted on UNIX Servers PMC7
18 GPG13: Accounts Deleted on Windows Servers PMC7
19 GPG13: Active Connections for Cisco ASA PMC3, PMC5, PMC6
20 GPG13: Active Connections for Cisco FWSM PMC3, PMC5, PMC6
21 GPG13: Active Connections for Cisco PIX PMC3, PMC5, PMC6
22 GPG13: Active Directory System Changes PMC4
23 GPG13: Active VPN Connections for Cisco VPN Concentrators PMC3, PMC6
24 GPG13: Active VPN Connections for Nortel Contivity PMC3, PMC6
25 GPG13: Active VPN Connections for RADIUS PMC3, PMC6
26 GPG13: Administrator Logins on Windows Servers PMC7, PMC9
27 GPG13: Allowed URLs by Source IPs PMC2
28 GPG13: Allowed URLs by Source IPs - F5 BIG-IP TMOS PMC2
29 GPG13: Allowed URLs by Source IPs - Microsoft IIS PMC2
30 GPG13: Allowed URLs by Source Users PMC2
31 GPG13: Allowed URLs by Source Users - F5 BIG-IP TMOS PMC2
32 GPG13: Allowed URLs by Source Users - Microsoft IIS PMC2
33 GPG13: Applications Under Attack PMC3, PMC4, PMC5, PMC6, PMC9
34 GPG13: Applications Under Attack - Cisco IOS PMC3, PMC4, PMC5, PMC6, PMC9
35 GPG13: Applications Under Attack - FireEye MPS PMC3, PMC4, PMC5, PMC6, PMC9
36 GPG13: Applications Under Attack - ISS SiteProtector PMC3, PMC4, PMC5, PMC6, PMC9
37 GPG13: Applications Under Attack - SiteProtector PMC3, PMC4, PMC5, PMC6, PMC9
38 GPG13: Applications Under Attack - Sourcefire Defense Center PMC3, PMC4, PMC5, PMC6, PMC9
39 GPG13: Attackers by Service PMC3, PMC4, PMC5, PMC6, PMC9
40 GPG13: Attackers by Service - Cisco IOS PMC3, PMC4, PMC5, PMC6, PMC9
41 GPG13: Attackers by Service - FireEye MPS PMC3, PMC4, PMC5, PMC6, PMC9
42 GPG13: Attackers by Service - ISS SiteProtector PMC3, PMC4, PMC5, PMC6, PMC9
43 GPG13: Attackers by Service - SiteProtector PMC3, PMC4, PMC5, PMC6, PMC9
44 GPG13: Attackers by Service - Sourcefire Defense Center PMC3, PMC4, PMC5, PMC6, PMC9
45 GPG13: Attackers by Signature PMC3, PMC4, PMC5, PMC6, PMC9
46 GPG13: Attackers by Signature - Cisco IOS PMC3, PMC4, PMC5, PMC6, PMC9
47 GPG13: Attackers by Signature - FireEye MPS PMC3, PMC4, PMC5, PMC6, PMC9
48 GPG13: Attackers by Signature - ISS SiteProtector PMC3, PMC4, PMC5, PMC6, PMC9
49 GPG13: Attackers by Signature - SiteProtector PMC3, PMC4, PMC5, PMC6, PMC9
50 GPG13: Attackers by Signature - Sourcefire Defense Center PMC3, PMC4, PMC5, PMC6, PMC9
51 GPG13: Attacks Detected PMC3, PMC4, PMC5, PMC6, PMC9
52 GPG13: Attacks Detected - Cisco IOS PMC3, PMC4, PMC5, PMC6, PMC9
53 GPG13: Attacks Detected - HIPS PMC3, PMC4, PMC5, PMC6, PMC9
54 GPG13: Attacks Detected - ISS SiteProtector PMC3, PMC4, PMC5, PMC6, PMC9
55 GPG13: Attacks Detected - SiteProtector PMC3, PMC4, PMC5, PMC6, PMC9
56 GPG13: Attacks Detected - Sourcefire Defense Center PMC3, PMC4, PMC5, PMC6, PMC9
57 GPG13: Bandwidth Usage by User PMC2
58 GPG13: Blocked URLs by Source IPs PMC2
59 GPG13: Blocked URLs by Source IPs - F5 BIG-IP TMOS PMC2
60 GPG13: Blocked URLs by Source IPs - Microsoft IIS PMC2
61 GPG13: Blocked URLs by Source Users PMC2
62 GPG13: Blocked URLs by Source Users - F5 BIG-IP TMOS PMC2
63 GPG13: Blocked URLs by Source Users - Microsoft IIS PMC2
64 GPG13: Check Point Configuration Changes PMC3, PMC4, PMC5, PMC6, PMC9
65 GPG13: Check Point Management Station Login PMC3, PMC5
66 GPG13: Check Point Objects Created PMC3, PMC4, PMC5, PMC6, PMC9
67 GPG13: Check Point Objects Deleted PMC3, PMC4, PMC5, PMC6, PMC9
68 GPG13: Check Point Objects Modified PMC3, PMC4, PMC5, PMC6, PMC9
69 GPG13: Check Point SIC Revoked PMC3, PMC4, PMC5, PMC6, PMC9
70 GPG13: Cisco ESA: Attacks by Event ID PMC3, PMC4, PMC5, PMC6
71 GPG13: Cisco ESA: Attacks by Threat Name PMC3, PMC4, PMC5, PMC6, PMC9
72 GPG13: Cisco ESA: Attacks Detected PMC3, PMC4, PMC5, PMC6, PMC9
73 GPG13: Cisco ESA: Scans PMC3, PMC4, PMC5, PMC6
74 GPG13: Cisco ESA: Updated PMC3, PMC4, PMC5, PMC6
75 GPG13: Cisco ISE, ACS Accounts Created PMC3, PMC4, PMC5, PMC6
76 GPG13: Cisco ISE, ACS Accounts Removed PMC3, PMC4, PMC5, PMC6
77 GPG13: Cisco ISE, ACS Configuration Changes PMC3, PMC4, PMC5, PMC6
78 GPG13: Cisco ISE, ACS Password Changes PMC3, PMC5, PMC6
79 GPG13: Cisco Line Protocol Status Changes PMC3, PMC4, PMC6
80 GPG13: Cisco Link Status Changes PMC3, PMC4, PMC6, PMC9
81 GPG13: Cisco Peer Reset/Reload PMC3, PMC4, PMC6
82 GPG13: Cisco Peer Supervisor Status Changes PMC3, PMC4, PMC6
83 GPG13: Cisco PIX, ASA, FWSM Failover Disabled PMC3, PMC4, PMC5, PMC6
84 GPG13: Cisco PIX, ASA, FWSM Failover Performed PMC3, PMC4, PMC5, PMC6, PMC9
85 GPG13: Cisco PIX, ASA, FWSM Policy Changed PMC3, PMC4, PMC5, PMC6
86 GPG13: Cisco Routers and Switches Restart PMC3, PMC4, PMC5, PMC6, PMC9
87 GPG13: Cisco Switch Policy Changes PMC3, PMC4, PMC5, PMC6
88 GPG13: Creation and Deletion of System Level Objects: AIX Audit PMC4, PMC5, PMC7
89 GPG13: Creation and Deletion of System Level Objects: DB2 Database PMC4, PMC5, PMC7
90 GPG13: Creation and Deletion of System Level Objects: HP-UX Audit PMC4, PMC5, PMC7
91 GPG13: Creation and Deletion of System Level Objects: Oracle PMC4, PMC5, PMC7
92 GPG13: Creation and Deletion of System Level Objects: Solaris BSM PMC4, PMC5, PMC7
93 GPG13: Creation and Deletion of System Level Objects: SQL Server PMC4, PMC5, PMC7
94 GPG13: Creation and Deletion of System Level Objects: Windows PMC4, PMC7
95 GPG13: DB2 Database Backup Failed PMC4, PMC7, PMC8
96 GPG13: DB2 Database Configuration Changes PMC4, PMC5, PMC7
97 GPG13: DB2 Database Failed Logins PMC5, PMC7
98 GPG13: DB2 Database Restore Failed PMC4, PMC5, PMC7, PMC8
99 GPG13: DB2 Database Stop and Start Events PMC4, PMC5, PMC7
100 GPG13: DB2 Database Successful Logins PMC5, PMC7
101 GPG13: DB2 Database User Additions and Deletions PMC5, PMC7
102 GPG13: Decru DataFort Cryptographic Key Events PMC5, PMC7
103 GPG13: Decru DataFort Zeroization Events PMC2, PMC3, PMC5, PMC7
104 GPG13: Denied Connections - Cisco IOS PMC2, PMC3, PMC5, PMC6
105 GPG13: Denied Connections - Cisco NXOS PMC2, PMC3, PMC5, PMC6
106 GPG13: Denied Connections - Cisco Router PMC2, PMC3, PMC5, PMC6
107 GPG13: Denied Connections - F5 BIG-IP TMOS PMC2, PMC3, PMC5, PMC6
108 GPG13: Denied Connections - Sidewinder PMC2, PMC3, PMC6
109 GPG13: Denied Connections - VMware vShield PMC2, PMC3, PMC6
110 GPG13: Denied Connections by IP Addresses - Check Point PMC2, PMC3, PMC5, PMC6
111 GPG13: Denied Connections by IP Addresses - Cisco ASA PMC2, PMC3, PMC5, PMC6
112 GPG13: Denied Connections by IP Addresses - Cisco FWSM PMC2, PMC3, PMC5, PMC6
113 GPG13: Denied Connections by IP Addresses - Cisco PIX PMC2, PMC3, PMC5, PMC6
114 GPG13: Denied Connections by IP Addresses - Nortel PMC2, PMC3, PMC6
115 GPG13: Denied Inbound Connections - Check Point PMC2, PMC3, PMC5, PMC6
116 GPG13: Denied Inbound Connections - Cisco ASA PMC2, PMC3, PMC5, PMC6
117 GPG13: Denied Inbound Connections - Cisco FWSM PMC2, PMC3, PMC5, PMC6
118 GPG13: Denied Inbound Connections - Cisco PIX PMC2, PMC3, PMC5, PMC6
119 GPG13: Denied Inbound Connections - Juniper Firewall PMC2, PMC3, PMC5, PMC6
120 GPG13: Denied Outbound Connections - Check Point PMC2, PMC3, PMC5
121 GPG13: Denied Outbound Connections - Cisco ASA PMC2, PMC3, PMC5
122 GPG13: Denied Outbound Connections - Cisco FWSM PMC2, PMC3, PMC5
123 GPG13: Denied Outbound Connections - Cisco PIX PMC2, PMC3, PMC5
124 GPG13: Denied Outbound Connections - Juniper Firewall PMC2, PMC3, PMC5
125 GPG13: Denied VPN Connections - RADIUS PMC2, PMC3, PMC6
126 GPG13: DHCP Granted/Renewed Activities on Microsoft DHCP PMC4, PMC6
127 GPG13: DHCP Granted/Renewed Activities on VMware vShield PMC4, PMC6
128 GPG13: DNS Server Error PMC4
129 GPG13: Domain activities on Symantec Endpoint Protection PMC4, PMC5
130 GPG13: Escalated Privilege Activities on Servers PMC4, PMC7
131 GPG13: ESX Accounts Activities PMC4
132 GPG13: ESX Accounts Created PMC4
133 GPG13: ESX Accounts Deleted PMC4
134 GPG13: ESX Failed Logins PMC4
135 GPG13: ESX Group Activities PMC4
136 GPG13: ESX Kernel log daemon terminating PMC4, PMC9
137 GPG13: ESX Kernel logging Stop PMC4
138 GPG13: ESX Syslogd Restart PMC4
139 GPG13: F5 BIG-IP TMOS Login Failed PMC3, PMC5
140 GPG13: F5 BIG-IP TMOS Login Successful PMC3, PMC5
141 GPG13: F5 BIG-IP TMOS Password Changes PMC3, PMC5
142 GPG13: F5 BIG-IP TMOS Ports Denied Access PMC3, PMC5, PMC6
143 GPG13: F5 BIG-IP TMOS Restarted PMC3, PMC4, PMC5, PMC9
144 GPG13: Failed Logins PMC5, PMC6, PMC7
145 GPG13: Failed Windows Events Summary PMC4
146 GPG13: Files Accessed on NetApp Filer Audit PMC4, PMC5
147 GPG13: Files Accessed on Servers PMC4, PMC5
148 GPG13: Files Accessed through Juniper SSL VPN (Secure Access) PMC2, PMC3, PMC4, PMC6
149 GPG13: Files Accessed through PANOS PMC2, PMC3, PMC4, PMC5, PMC6
150 GPG13: Files Accessed Through Pulse Connect Secure PMC2, PMC3, PMC4, PMC6
151 GPG13: Files Downloaded via Proxy PMC2, PMC4
152 GPG13: Files Downloaded via Proxy - Blue Coat PMC2, PMC4
153 GPG13: Files Downloaded via Proxy - Cisco WSA PMC2, PMC4
154 GPG13: Files Downloaded via Proxy - Microsoft IIS PMC2, PMC4
155 GPG13: Files Downloaded via the Web PMC2, PMC4
156 GPG13: Files Downloaded via the Web - F5 BIG-IP TMOS PMC2, PMC4
157 GPG13: Files Downloaded via the Web - Microsoft IIS PMC2, PMC4
158 GPG13: Files Uploaded via Proxy PMC2, PMC4
159 GPG13: Files Uploaded via Proxy - Blue Coat PMC2, PMC4
160 GPG13: Files Uploaded via Proxy - Cisco WSA PMC2, PMC4
161 GPG13: Files Uploaded via Proxy - Microsoft IIS PMC2, PMC4
162 GPG13: Files Uploaded via the Web PMC2, PMC4
163 GPG13: Files Uploaded via the Web - F5 BIG-IP TMOS PMC2, PMC4
164 GPG13: Files Uploaded via the Web - Microsoft IIS PMC2, PMC4
165 GPG13: FireEye MPS: Attacks by Event ID PMC3, PMC4, PMC5, PMC6, PMC9
166 GPG13: FireEye MPS: Attacks by Threat Name PMC3, PMC4, PMC5, PMC6, PMC9
167 GPG13: FireEye MPS: Attacks Detected PMC3, PMC4, PMC5, PMC6, PMC9
168 GPG13: FortiOS DLP Attacks Detected PMC4, PMC5, PMC6, PMC9
169 GPG13: FortiOS: Attacks by Event ID PMC4, PMC5, PMC6, PMC9
170 GPG13: FortiOS: Attacks by Threat Name PMC4, PMC5, PMC6, PMC9
171 GPG13: FortiOS: Attacks Detected PMC4, PMC5, PMC6, PMC9
172 GPG13: Group Activities on NetApp Filer Audit PMC4, PMC5
173 GPG13: Group Activities on Symantec Endpoint Protection PMC4, PMC5, PMC6
174 GPG13: Group Activities on UNIX Servers PMC7
175 GPG13: Group Activities on Windows Servers PMC7
176 GPG13: Groups Created on UNIX Servers PMC7
177 GPG13: Groups Created on Windows Servers PMC7
178 GPG13: Groups Deleted on UNIX Servers PMC7
179 GPG13: Groups Deleted on Windows Servers PMC7
180 GPG13: Guardium SQL Guard Audit Configuration Changes PMC4, PMC5, PMC7
181 GPG13: Guardium SQL Guard Audit Data Access PMC4, PMC5, PMC7
182 GPG13: Guardium SQL Guard Audit Logins PMC5, PMC7
183 GPG13: Guardium SQL Guard Audit Startup or Shutdown PMC5, PMC7, PMC9
184 GPG13: Guardium SQL Guard Configuration Changes PMC4, PMC5, PMC7
185 GPG13: Guardium SQL Guard Data Access PMC4, PMC5, PMC7
186 GPG13: Guardium SQL Guard Logins PMC5, PMC7
187 GPG13: Guardium SQL Guard Startup or Shutdown PMC5, PMC7, PMC9
188 GPG13: HP NonStop Audit Configuration Changes PMC4, PMC5, PMC7
189 GPG13: HP NonStop Audit Login Failed PMC5, PMC7
190 GPG13: HP NonStop Audit Login Successful PMC5, PMC7
191 GPG13: HP NonStop Audit Object Access PMC4, PMC5, PMC7
192 GPG13: HP NonStop Audit Object Changes PMC4, PMC5, PMC7
193 GPG13: HP NonStop Audit Permissions Changed PMC4, PMC5, PMC7
194 GPG13: i5/OS Access Control List Modifications PMC4, PMC5, PMC7
195 GPG13: i5/OS Audit Configuration Changes PMC4, PMC5, PMC7
196 GPG13: i5/OS Internet Security Management Events PMC4, PMC5, PMC9
197 GPG13: i5/OS Key Ring File Events PMC7
198 GPG13: i5/OS Network Authentication Events PMC5, PMC6, PMC7
199 GPG13: i5/OS Object Access PMC4, PMC5, PMC7
200 GPG13: i5/OS Object Creation and Deletion PMC7
201 GPG13: i5/OS Restore Events PMC8
202 GPG13: i5/OS Server Security User Information Actions PMC4, PMC5, PMC7
203 GPG13: i5/OS System Management Changes PMC4, PMC5
204 GPG13: i5/OS User Profile Creation, Modification, or Restoration PMC5, PMC7, PMC8
205 GPG13: Juniper Firewall Escalated Privilege PMC3, PMC5, PMC6
206 GPG13: Juniper Firewall Policy Changed PMC3, PMC4, PMC5, PMC6
207 GPG13: Juniper Firewall Reset Accepted PMC3, PMC5, PMC6
208 GPG13: Juniper Firewall Reset Imminent PMC3, PMC5, PMC6
209 GPG13: Juniper Firewall Restarted PMC3, PMC4, PMC5, PMC6, PMC9
210 GPG13: Juniper Firewall VPN Tunnel Status Change PMC3, PMC4, PMC5, PMC6
211 GPG13: Juniper SSL VPN (Secure Access) Policy Changed PMC3, PMC4, PMC6
212 GPG13: Juniper SSL VPN (Secure Access) Successful Logins PMC3, PMC6
213 GPG13: Juniper SSL VPN Successful Logins PMC3, PMC6
214 GPG13: Last Activities Performed by Administrators PMC4, PMC5, PMC7
215 GPG13: Last Activities Performed by All Users PMC4, PMC5, PMC7
216 GPG13: Logins by Authentication Type PMC5, PMC7
217 GPG13: LogLogic DSM Configuration Changes PMC4, PMC5, PMC10
218 GPG13: LogLogic DSM Data Access PMC5, PMC10
219 GPG13: LogLogic DSM Logins PMC5
220 GPG13: LogLogic DSM Startup or Shutdown PMC5
221 GPG13: LogLogic File Retrieval Errors PMC4, PMC5, PMC10
222 GPG13: LogLogic Management Center Account Activities PMC5
223 GPG13: LogLogic Management Center Backup Activities PMC5
224 GPG13: LogLogic Management Center Login PMC5
225 GPG13: LogLogic Management Center Restore Activities PMC4, PMC5
226 GPG13: LogLogic Message Routing Errors PMC4, PMC5, PMC10
227 GPG13: LogLogic Universal Collector Configuration Changes PMC4, PMC5, PMC10
228 GPG13: McAfee AntiVirus: Attacks by Event ID PMC3, PMC4, PMC5, PMC6, PMC9
229 GPG13: McAfee AntiVirus: Attacks by Threat Name PMC3, PMC4, PMC5, PMC6, PMC9
230 GPG13: McAfee AntiVirus: Attacks Detected PMC3, PMC4, PMC5, PMC6, PMC9
231 GPG13: Microsoft Operations Manager - Failed Windows Events PMC4, PMC5, PMC7, PMC8
232 GPG13: Microsoft Operations Manager - Windows Accounts Activities PMC4, PMC5, PMC7
233 GPG13: Microsoft Operations Manager - Windows Accounts Changed PMC5, PMC7
234 GPG13: Microsoft Operations Manager - Windows Accounts Created PMC5, PMC7
235 GPG13: Microsoft Operations Manager - Windows Accounts Enabled PMC5, PMC7
236 GPG13: Microsoft Operations Manager - Windows Events by Users PMC5, PMC7
237 GPG13: Microsoft Operations Manager - Windows Events Summary PMC5, PMC7
238 GPG13: Microsoft Operations Manager - Windows Password Changes PMC5, PMC7
239 GPG13: Microsoft Operations Manager - Windows Permissions Modified PMC5, PMC7
240 GPG13: Microsoft Operations Manager - Windows Policies Modified PMC5, PMC7
241 GPG13: Microsoft Operations Manager - Windows Servers Restarted PMC4, PMC5, PMC9
242 GPG13: Microsoft Sharepoint Content Deleted PMC4, PMC5
243 GPG13: Microsoft Sharepoint Content Updates PMC4, PMC5
244 GPG13: Microsoft Sharepoint Permissions Changed PMC4, PMC5, PMC7
245 GPG13: Microsoft Sharepoint Policy Add, Remove, or Modify PMC4, PMC5, PMC7
246 GPG13: Microsoft SQL Server Backup Failed PMC4, PMC5, PMC7, PMC8
247 GPG13: Microsoft SQL Server Configuration Changes PMC4, PMC5, PMC7
248 GPG13: Microsoft SQL Server Data Access PMC5, PMC7
249 GPG13: Microsoft SQL Server Database Failed Logins PMC5, PMC7
250 GPG13: Microsoft SQL Server Database Permission Events PMC5, PMC7
251 GPG13: Microsoft SQL Server Database Successful Logins PMC5, PMC7
252 GPG13: Microsoft SQL Server Database User Additions and Deletions PMC5, PMC7
253 GPG13: Microsoft SQL Server Password Changes PMC5, PMC7
254 GPG13: Microsoft SQL Server Restore Failed PMC4, PMC5, PMC7, PMC8
255 GPG13: Microsoft SQL Server Schema Corruption PMC4, PMC5, PMC7, PMC9
256 GPG13: Microsoft SQL Server Shutdown by Reason PMC5, PMC7
257 GPG13: Most Active Email Senders - Exchange 2000/2003 PMC5
258 GPG13: Most Active Ports Through Firewall - Check Point PMC3, PMC5
259 GPG13: Most Active Ports Through Firewall - Cisco ASA PMC3, PMC5
260 GPG13: Most Active Ports Through Firewall - Cisco FWSM PMC3, PMC5
261 GPG13: Most Active Ports Through Firewall - Cisco PIX PMC3, PMC5
262 GPG13: Most Active Ports Through Firewall - Fortinet PMC3, PMC5
263 GPG13: Most Active Ports Through Firewall - Juniper Firewall PMC3, PMC5
264 GPG13: Most Active Ports Through Firewall - Nortel PMC3, PMC5
265 GPG13: NetApp Filer Audit Accounts Enabled PMC5
266 GPG13: NetApp Filer Audit Group Members Added PMC5
267 GPG13: NetApp Filer Audit Group Members Deleted PMC5
268 GPG13: NetApp Filer Audit Login Failed PMC5
269 GPG13: NetApp Filer Audit Login Successful PMC5
270 GPG13: NetApp Filer Audit Logs Cleared PMC5
271 GPG13: NetApp Filer Audit Policies Modified PMC4, PMC5
272 GPG13: NetApp Filer File Activity PMC5
273 GPG13: NetApp Filer Login Failed PMC5
274 GPG13: NetApp Filer Login Successful PMC5
275 GPG13: NetApp Filer Password Changes PMC5
276 GPG13: NetApp Filer Snapshot Error PMC4, PMC5, PMC8
277 GPG13: Network Traffic per Rule - Check Point PMC2, PMC3, PMC5
278 GPG13: Network Traffic per Rule - Juniper Firewall PMC2, PMC3, PMC5
279 GPG13: Network Traffic per Rule - Nortel PMC2, PMC3, PMC5
280 GPG13: Oracle Database Configuration Changes PMC2 PMC3 PMC4 PMC5 PMC7
281 GPG13: Oracle Database Data Access PMC5, PMC7
282 GPG13: Oracle Database Failed Logins PMC5, PMC7
283 GPG13: Oracle Database Permission Events PMC5, PMC7
284 GPG13: Oracle Database Shutdown PMC5, PMC7, PMC9
285 GPG13: Oracle Database Successful Logins PMC5, PMC7
286 GPG13: Oracle Database User Additions and Deletions PMC5, PMC7
287 GPG13: PANOS: Attacks by Event ID PMC3, PMC4, PMC5, PMC6
288 GPG13: PANOS: Attacks by Threat Name PMC3, PMC4, PMC5, PMC6
289 GPG13: PANOS: Attacks Detected PMC3, PMC4, PMC5, PMC6
290 GPG13: Password Changes on Windows Servers PMC7
291 GPG13: Peer Servers and Status PMC2, PMC4
292 GPG13: Peer Servers and Status - Blue Coat PMC2, PMC4
293 GPG13: Peer Servers and Status - Cisco WSA PMC2, PMC4
294 GPG13: Peer Servers and Status - Microsoft IIS PMC2, PMC4
295 GPG13: Periodic Review of Log Reports PMC4, PMC5, PMC7
296 GPG13: Periodic Review of User Access Logs PMC4, PMC5, PMC7
297 GPG13: Permissions Modified on Windows Servers PMC4, PMC5, PMC7
298 GPG13: Policies Modified on Windows Servers PMC4, PMC5, PMC7
299 GPG13: Ports Allowed Access - Check Point PMC2, PMC3, PMC5
300 GPG13: Ports Allowed Access - Cisco ASA PMC2, PMC3, PMC5
301 GPG13: Ports Allowed Access - Cisco FWSM PMC2, PMC3, PMC5
302 GPG13: Ports Allowed Access - Cisco IOS PMC2, PMC3, PMC5
303 GPG13: Ports Allowed Access - Cisco Netflow PMC2, PMC3, PMC5
304 GPG13: Ports Allowed Access - Cisco PIX PMC2, PMC3, PMC5
305 GPG13: Ports Allowed Access - F5 BIG-IP TMOS PMC2, PMC3, PMC5
306 GPG13: Ports Allowed Access - Fortinet PMC2, PMC3, PMC5
307 GPG13: Ports Allowed Access - Juniper Firewall PMC2, PMC3, PMC5
308 GPG13: Ports Allowed Access - Juniper JunOS PMC2, PMC3, PMC5
309 GPG13: Ports Allowed Access - Juniper RT Flow PMC2, PMC3, PMC5
310 GPG13: Ports Allowed Access - Nortel PMC2, PMC3, PMC5
311 GPG13: Ports Allowed Access - PANOS PMC2, PMC3, PMC5
312 GPG13: Ports Allowed Access - Sidewinder PMC2, PMC3, PMC5
313 GPG13: Ports Allowed Access - VMware vShield PMC2, PMC3, PMC5
314 GPG13: Ports Denied Access - Check Point PMC2, PMC3, PMC5, PMC6
315 GPG13: Ports Denied Access - Cisco ASA PMC2, PMC3, PMC5, PMC6
316 GPG13: Ports Denied Access - Cisco FWSM PMC2, PMC3, PMC5, PMC6
317 GPG13: Ports Denied Access - Cisco IOS PMC2, PMC3, PMC5, PMC6
318 GPG13: Ports Denied Access - Cisco PIX PMC2, PMC3, PMC5, PMC6
319 GPG13: Ports Denied Access - Cisco Router PMC2, PMC3, PMC5, PMC6
320 GPG13: Ports Denied Access - Fortinet PMC2, PMC3, PMC5, PMC6
321 GPG13: Ports Denied Access - Juniper Firewall PMC2, PMC3, PMC5, PMC6
322 GPG13: Ports Denied Access - Juniper JunOS PMC2, PMC3, PMC5, PMC6
323 GPG13: Ports Denied Access - Juniper RT Flow PMC2, PMC3, PMC5, PMC6
324 GPG13: Ports Denied Access - Nortel PMC2, PMC3, PMC5, PMC6
325 GPG13: Ports Denied Access - PANOS PMC2, PMC3, PMC5, PMC6
326 GPG13: Ports Denied Access - Sidewinder PMC2, PMC3, PMC5, PMC6
327 GPG13: Ports Denied Access - VMware vShield PMC2, PMC3, PMC5, PMC6
328 GPG13: Pulse Connect Secure Failed Logins PMC3, PMC6
329 GPG13: Pulse Connect Secure Policy Change PMC3, PMC4, PMC6
330 GPG13: Pulse Connect Secure successful logins PMC3, PMC6
331 GPG13: RACF Accounts Created PMC5, PMC7
332 GPG13: RACF Accounts Deleted PMC5, PMC7
333 GPG13: RACF Accounts Modified PMC5, PMC7
334 GPG13: RACF Failed Logins PMC5, PMC6
335 GPG13: RACF Files Accessed PMC4, PMC5
336 GPG13: RACF Password Changed PMC5
337 GPG13: RACF Permissions Changed PMC5
338 GPG13: RACF Process Started PMC5
339 GPG13: RACF Successful Logins PMC5, PMC7
340 GPG13: Root Logins PMC7
341 GPG13: Sensors Generating Alerts PMC2, PMC3, PMC5, PMC6
342 GPG13: Sensors Generating Alerts - Cisco IOS PMC2, PMC3, PMC5, PMC6
343 GPG13: Sensors Generating Alerts - FireEye MPS PMC2, PMC3, PMC5, PMC6
344 GPG13: Sensors Generating Alerts - ISS SiteProtector PMC2, PMC3, PMC5, PMC6
345 GPG13: Sensors Generating Alerts - SiteProtector PMC2, PMC3, PMC5, PMC6
346 GPG13: Sensors Generating Alerts - Sourcefire Defense Center PMC2, PMC3, PMC5, PMC6
347 GPG13: Servers Under Attack PMC3, PMC4, PMC5, PMC6, PMC9
348 GPG13: Servers Under Attack - Cisco IOS PMC3, PMC4, PMC5, PMC6, PMC9
349 GPG13: Servers Under Attack - FireEye MPS PMC3, PMC4, PMC5, PMC6, PMC9
350 GPG13: Servers Under Attack - HIPS PMC3, PMC4, PMC5, PMC6, PMC9
351 GPG13: Servers Under Attack - ISS SiteProtector PMC3, PMC4, PMC5, PMC6, PMC9
352 GPG13: Servers Under Attack - SiteProtector PMC3, PMC4, PMC5, PMC6, PMC9
353 GPG13: Servers Under Attack - Sourcefire Defense Center PMC3, PMC4, PMC5, PMC6, PMC9
354 GPG13: Sidewinder Configuration Changes PMC2, PMC3, PMC4, PMC5, PMC6
355 GPG13: Source of Attacks PMC2, PMC3, PMC4, PMC5, PMC6, PMC9
356 GPG13: Source of Attacks - Cisco IOS PMC2, PMC3, PMC4, PMC5, PMC6, PMC9
357 GPG13: Source of Attacks - FireEye MPS PMC2, PMC3, PMC4, PMC5, PMC6, PMC9
358 GPG13: Source of Attacks - HIPS PMC2, PMC3, PMC4, PMC5, PMC6, PMC9
359 GPG13: Source of Attacks - ISS SiteProtector PMC2, PMC3, PMC4, PMC5, PMC6, PMC9
360 GPG13: Source of Attacks - SiteProtector PMC2, PMC3, PMC4, PMC5, PMC6, PMC9
361 GPG13: Source of Attacks - Sourcefire Defense Center PMC2, PMC3, PMC4, PMC5, PMC6, PMC9
362 GPG13: Successful Logins PMC2 PMC3 PMC7
363 GPG13: Sybase ASE Database Backup and Restoration PMC4, PMC5, PMC7, PMC8
364 GPG13: Sybase ASE Database Configuration Changes PMC4, PMC5, PMC7
365 GPG13: Sybase ASE Database Create Events PMC5, PMC7
366 GPG13: Sybase ASE Database Data Access PMC5, PMC7
367 GPG13: Sybase ASE Database Drop Events PMC5, PMC7
368 GPG13: Sybase ASE Database Startup or Shutdown PMC5, PMC7
369 GPG13: Sybase ASE Database User Additions and Deletions PMC5, PMC7
370 GPG13: Sybase ASE Failed Logins PMC5, PMC7
371 GPG13: Sybase ASE Successful Logins PMC5, PMC7
372 GPG13: Symantec AntiVirus: Attacks by Threat Name PCM2PMC3, PMC4, PMC5, PMC6, PMC9
373 GPG13: Symantec AntiVirus: Attacks Detected PMC3, PMC4, PMC5, PMC6, PMC9
374 GPG13: Symantec AntiVirus: Scans PMC3, PMC5, PMC6
375 GPG13: Symantec AntiVirus: Updated PMC3, PMC4, PMC5, PMC6
376 GPG13: Symantec Endpoint Protection Configuration Changes PMC3, PMC4, PMC5, PMC6
377 GPG13: Symantec Endpoint Protection Password Changes PMC3, PMC5, PMC6
378 GPG13: Symantec Endpoint Protection Policy Add, Remove, or Modify PMC3, PMC5, PMC6
379 GPG13: Symantec Endpoint Protection: Attacks by Threat Name PMC3, PMC4, PMC5, PMC6, PMC9
380 GPG13: Symantec Endpoint Protection: Attacks Detected PMC3, PMC4, PMC5, PMC6, PMC9
381 GPG13: Symantec Endpoint Protection: Scans PMC3, PMC5, PMC6
382 GPG13: Symantec Endpoint Protection: Updated PMC3, PMC4, PMC5, PMC6
383 GPG13: TIBCO ActiveMatrix Administrator Failed Logins PMC7
384 GPG13: TIBCO ActiveMatrix Administrator Permission Changes PMC4, PMC7
385 GPG13: TIBCO ActiveMatrix Administrator Successful Logins PMC7
386 GPG13: TIBCO Administrator Password Changes PMC7
387 GPG13: TIBCO Administrator Permission Changes PMC7
388 GPG13: TrendMicro Control Manager: Attacks Detected PMC2, PMC3, PMC4, PMC5, PMC6, PMC9
389 GPG13: TrendMicro Control Manager: Attacks Detected by Threat Name PMC2, PMC3, PMC4, PMC5, PMC6, PMC9
390 GPG13: TrendMicro OfficeScan: Attacks Detected PMC2, PMC3, PMC4, PMC5, PMC6, PMC9
391 GPG13: TrendMicro OfficeScan: Attacks Detected by Threat Name PMC2, PMC3, PMC4, PMC5, PMC6, PMC9
392 GPG13: Tripwire Modifications, Additions, and Deletions PMC2 PMC3 PMC4 PMC5 PMC7
393 GPG13: Trusted Domain Deleted on Windows Servers PMC7
394 GPG13: Unauthorized Logins PMC2, PMC6
395 GPG13: Unencrypted Logins PMC2, PMC6
396 GPG13: Unencrypted Network Services - Check Point PMC3, PMC6
397 GPG13: Unencrypted Network Services - Cisco ASA PMC3, PMC6
398 GPG13: Unencrypted Network Services - Cisco FWSM PMC3, PMC6
399 GPG13: Unencrypted Network Services - Cisco IOS PMC3, PMC6
400 GPG13: Unencrypted Network Services - Cisco Netflow PMC3, PMC6
401 GPG13: Unencrypted Network Services - Cisco PIX PMC3, PMC6
402 GPG13: Unencrypted Network Services - F5 BIG-IP TMOS PMC3, PMC6
403 GPG13: Unencrypted Network Services - Fortinet PMC3, PMC6
404 GPG13: Unencrypted Network Services - Juniper Firewall PMC3, PMC6
405 GPG13: Unencrypted Network Services - Juniper JunOS PMC3, PMC6
406 GPG13: Unencrypted Network Services - Juniper RT Flow PMC3, PMC6
407 GPG13: Unencrypted Network Services - Nortel PMC3, PMC6
408 GPG13: Unencrypted Network Services - PANOS PMC3, PMC6
409 GPG13: Unencrypted Network Services - Sidewinder PMC3, PMC6
410 GPG13: Unencrypted Network Services - VMware vShield PMC3, PMC6
411 GPG13: UNIX Failed Logins PMC7
412 GPG13: Users Created on Servers PMC7
413 GPG13: Users Removed from Servers PMC7
414 GPG13: Users Using the Proxies PMC2
415 GPG13: Users Using the Proxies - Blue Coat PMC2
416 GPG13: Users Using the Proxies - Cisco WSA PMC2
417 GPG13: Users Using the Proxies - Microsoft IIS PMC2
418 GPG13: vCenter Change Attributes PMC4
419 GPG13: vCenter Datastore Events PMC8
420 GPG13: vCenter Modify Firewall Policy PMC3, PMC4
421 GPG13: vCenter Orchestrator Change Attributes PMC4, PMC7
422 GPG13: vCenter Orchestrator Data Move PMC7
423 GPG13: vCenter Orchestrator Datastore Events PMC7, PMC8
424 GPG13: vCenter Orchestrator Failed Logins PMC7
425 GPG13: vCenter Orchestrator Virtual Machine Created PMC7
426 GPG13: vCenter Orchestrator Virtual Machine Deleted PMC7
427 GPG13: vCenter Orchestrator Virtual Machine Shutdown PMC7
428 GPG13: vCenter Orchestrator Virtual Machine Started PMC7
429 GPG13: vCenter Shutdown or Restart of ESX Server PMC4, PMC9
430 GPG13: vCenter Successful Logins PMC7
431 GPG13: vCenter User Permission Change PMC7
432 GPG13: vCenter Virtual Machine Created PMC7
433 GPG13: vCenter Virtual Machine Deleted PMC7
434 GPG13: vCenter Virtual Machine Shutdown PMC7
435 GPG13: vCenter Virtual Machine Started PMC7
436 GPG13: vCloud Failed Logins PMC7
437 GPG13: vCloud Organization Created PMC7
438 GPG13: vCloud Organization Deleted PMC7
439 GPG13: vCloud Organization Modified PMC7
440 GPG13: vCloud Successful Logins PMC7
441 GPG13: vCloud User Created PMC7
442 GPG13: vCloud User Deleted or Removed PMC7
443 GPG13: vCloud vApp Created, Modified, or Deleted PMC7
444 GPG13: vCloud vDC Created, Modified, or Deleted PMC7
445 GPG13: VPN Connection Average Bandwidth PMC3
446 GPG13: VPN Connection Average Duration PMC3
447 GPG13: VPN Connection Disconnect Reasons PMC2 PMC3
448 GPG13: VPN Connections by Users PMC2 PMC3
449 GPG13: VPN Denied Connections by Users PMC2 PMC3
450 GPG13: VPN Sessions by Destination IPs PMC2 PMC3
451 GPG13: VPN Sessions by Source IPs PMC2 PMC3
452 GPG13: VPN Sessions by Users PMC2 PMC3
453 GPG13: VPN Users Accessing Corporate Network PMC2 PMC3
454 GPG13: vShield Edge Configuration Changes PMC3, PMC4, PMC5, PMC6
455 GPG13: Web Access from All Users PMC2 PMC3
456 GPG13: Web Access from All Users - F5 BIG-IP TMOS PMC2 PMC3
457 GPG13: Web Access from All Users - Fortinet PMC2 PMC3
458 GPG13: Web Access from All Users - Microsoft IIS PMC2 PMC3
459 GPG13: Web Access from All Users - PANOS PMC2 PMC3
460 GPG13: Web Access to Applications PMC2 PMC3
461 GPG13: Web Access to Applications - F5 BIG-IP TMOS PMC2
462 GPG13: Web Access to Applications - Fortinet PMC2
463 GPG13: Web Access to Applications - Microsoft IIS PMC2
464 GPG13: Web Access to Applications - PANOS PMC2
465 GPG13: Web URLs Visited PMC2
466 GPG13: Web URLs Visited - F5 BIG-IP TMOS PMC2
467 GPG13: Web URLs Visited - Fortinet PMC2
468 GPG13: Web URLs Visited - Microsoft IIS PMC2
469 GPG13: Web URLs Visited - PANOS PMC2
470 GPG13: Web URLs Visited via Proxy PMC2
471 GPG13: Web URLs Visited via Proxy - Blue Coat PMC2
472 GPG13: Web URLs Visited via Proxy - Cisco WSA PMC2
473 GPG13: Web URLs Visited via Proxy - Microsoft IIS PMC2
474 GPG13: Windows Accounts Enabled PMC7
475 GPG13: Windows Audit Logs Cleared PMC7
476 GPG13: Windows Events by Users PMC7
477 GPG13: Windows Events Summary PMC4, PMC7, PMC8
478 GPG13: Windows Group Members Added PMC7
479 GPG13: Windows Group Members Deleted PMC7
480 GPG13: Windows New Services Installed PMC4, PMC7
481 GPG13: Windows Programs Accessed PMC4, PMC7
482 GPG13: Windows Servers Restarted PMC4, PMC9
483 GPG13: Windows Software Update Successes PMC4