Quick Start Security for Prisma SASE
Thank you!
We got your information.
Coralogix Extension For Prisma SASE Includes:
Alerts - 1
Stay on top of Prisma SASE key performance metrics. Keep everyone in the know with integration with Slack, PagerDuty and more.
UserID - VPN login from a new user observed
This alert is triggered whenever a VPN login from a new user is observed. Impact Threat actors can create new user accounts and use them to log in to critical services/applications using a VPN. Mitigation Check if the administrator is aware of this new user and if this login activity is legit. If not, investigate further. MITRE Tactic: TA0001 MITRE Technique: T1133
Integration
Learn more about Coralogix's out-of-the-box integration with Prisma SASE in our documentation.
