Forum Discussion

ddaniel's avatar
ddaniel
Icon for Staying Involved rankStaying Involved
20 days ago

Is there any way to expose/export DHCP logs from Cato SDP clients?

is there any way (events / API) to see DHCP events for our SDP users?  Our security vendors (Rapid7 and Defender for Identity) are doing correlation based on DNS and DHCP events and sometimes see SDP...
API
monitoring
network
sdp
security
ddaniel's avatar
ddaniel
Icon for Staying Involved rankStaying Involved
19 days ago

I will look at the event feeds API.  I have not seen an event for Cato Client Tunnel DHCP in the CMA, but I will check out the events feed.  I have been able to use the API to pull all users their status (LAN/Tunnel) and their IP addresses, but I would need to poll every 5 minutes or something to keep track of it.  I will look at the events feed.  Thanks.