AD integration

[Nicholai Tailor]

Hello,

Does anyone have steps to setup AD integration to a stand alone setup that is already up and running?

Cheers

[alfonso.r...@wazuh.com]

Hello Nicholai,

In our new version of Wazuh 3.7.0, we have added the ability to monitor our Azure AD.

Here you can find the information to configure the integration:

https://documentation.wazuh.com/current/azure/monitoring%20services.html

And here is the integration configuration information:

https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/wodle-azure-logs.html

We are sorry if we did not understand you right. If you are not referring to the integration with Azure AD please let us know.

Thank you very much for your attention and for your patience. 

Kind regards,

Alfonso Ruiz-Bravo

[Nicholai Tailor]

Hi Alfonso,

I am referring to Active Directory in house not in the cloud. :)

Cheers

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/501f235c-96b6-401e-95ff-e468c9d60be3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Pedro Sánchez]

Hi Nicholai,

Do you mind integration AD/LDAP with Kibana interface, isn't it?

Currently you will have two options (as far as I know):

- X-Pack from Elasticsearch

As you probably know, x-pack security is a paid option from Elasticsearch which includes between others, AD integration capabilities: https://www.elastic.co/guide/en/elastic-stack-overview/current/active-directory-realm.html

- SearchGuard

SearchGuard is part free open source/part premium, it provides as well an AD integration, we are currently creating docs for using SearchGuard with Wazuh. 

Unfortunately, the AD integration is only available in enterprise subscription, check here the tiers: https://search-guard.com/product/

More info about AD integration: https://docs.search-guard.com/latest/active-directory-ldap-connection.

I hope it helps, best regards,

Pedro.

To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/CAOABaY_gPOog1LwuQ0-dSviuWyO74u%2BHYvUVe-%3D%2BVU9M%2B0x%2Bzw%40mail.gmail.com.

[Pedro Sánchez]

I can see we have a different email thread (and recent) which is already covering this: 

• AD integration
  

Let's use that one better, closing this one.

Regards,

Pedro.