The domestic SIEM “ALog” has begun log integration with Soliton Systems' integrated authentication cloud service “Soliton OneGate.” Through a dedicated plug-in, management logs, login and user activity logs are periodically collected and formatted in ALog, enabling early identification of suspicious behavior through cross-analysis of multiple logs. Authentication-log monitoring for OneGate can also be added through the ALog MDR extension option.
AMIYA Corporation announced that its domestic SIEM “ALog” now supports log integration with Soliton Systems' integrated authentication cloud service “Soliton OneGate.” Using a dedicated plug-in, management logs, administrator and user login logs, user activity logs, synchronization execution logs and SSO access logs are periodically collected and formatted in ALog, creating an environment in which they can be reviewed centrally.
Reports and alerts in ALog enable personnel to quickly identify suspicious behavior, including an increase in failed logins, signs of brute-force attacks, and access from outside business hours or overseas. Logs from firewalls, proxies, servers and cloud services can also be aggregated, supporting risk assessment across multiple logs.
The background is the growing importance of authentication infrastructure as cloud service use expands. The government's SCS evaluation system also identifies the collection and retention of authentication-server logs and the establishment of a framework for continuously reviewing multiple logs as issues. Authentication logs from OneGate can additionally be added to the monitoring scope through the ALog MDR extension option.