Use https://seceonhelp.freshdesk.com/support/login to access updated Knowledge Base Articles, Submit Technical Support Tickets and Review Status of submitted support tickets.

Device Integration: Box Device

Overview

Device Configurator to enable and configure device peripherals, such as clocks and pins, as well as standard MCU peripherals that do not require their own tool. Multiple network devices can be added to the JSON file.

STEPS

Box Device JSON Config generation & App Authorization:

  1. Login to Box Developer console and in My Apps click Create New App.

     

  2. Select Custom App, select authentication as Server Authentication (with JWT) and enter an App Name for your App future reference and click on Create App to create it.

     

  3. In Configuration go to App Access Level and select App + Enterprise Access.

     

  4. In Application Scopes make sure Manage enterprise properties is marked.

  5. In Add and Manage Public Keys click Generate Public/Private Key Pair and save your Box Dev JSON configuration file (generated in this step itself and not from Download as JSON option) for integration with our SIEM.

  6. Click Save Changes.

  7. Login to Box Admin Console and go to Apps to authenticate your app.

  8. Go to Custom App Managers, click Add App and enter your Client ID mentioned in your JSON Config file, Click Next and then click Authorize to authorize your App.

     

 

Seceon SIEM Integration:

  1. Go to our Seceon UI then go to provisioning screen and under Add-on Devices go to Box Configuration.

  2. Click Add and provided the details asked like App Name (without Space), CCE IP and upload JSON Config file by clicking Browse near Key JSON.

  3. Click Save to add the configuration.

Verification:-

  • VERIFICATION CAN BE DONE IN TWO WAYS :-

                 1. BY checking on UI 

2. Checking logs through CCE server

Verification through UI 

  • Open UI >>System tab >> Logs and flows collection status:

  • The IP will reflect below source device IP 

 

Verification Through CCE server

  • Run the command " sudo tcpdump -i any port 514 and host <IP address>

 

Seceon Inc. All rights reserved. https://www.seceon.com