Investigation of Firewall logs, using Zyxel Firewall app as an example. With instant visualization, the users will be able to see Zyxel Firewall info, Usage statistics and Security inspection

1. © 2 0 1 9 S P L U N K I N C .
Splunk
Mumbai User
Group
 Join splunk_mumbai_usergroup on Slack
 Use _mumbai_usergroup for Q&A during
session.
 Please keep your line muted .
 Questions/doubts to be entered in conversation.
 Slides, Recording and Feedback form will be
posted on the Event Page after the session.
https://usergroups.splunk.com/mumbai-splunk-user-group/

2. © 2 0 1 9 S P L U N K I N C .
Speaker and Panel members
Ajith Ashok Nayak
Tech Lead (Avotrix)
3+ years of experience as Splunk Admin.
Enterprise Security and ITSI
Ashvin Pandey
Analyst(Avotrix)
Vignesh Naidu
Director(Avotrix)
Vikram Yadav
Sr. Analyst(Avotrix)

3. © 2 0 1 9 S P L U N K I N C .
Firewall and
its analytics
using Splunk

4. © 2 0 1 9 S P L U N K I N C .
Agenda 1) Security concern during pandemic.
2) What is Firewall?
3) Firewall Logs.
4) Firewall log analytics using Splunk.
5) Q & A (10-15 minutes)

5. © 2 0 1 9 S P L U N K I N C .
Work from Home
Security teams to be more Resilient
Security teams to be more Flexible

6. © 2 0 1 9 S P L U N K I N C .
VPN Traffic
VPN traffic shot up by 200%
Increased data breach cost !

7. © 2 0 1 9 S P L U N K I N C .
Data Breach
66% of Indian Organization
1,92,000 coronavirus related cyberattacks

8. © 2 0 1 9 S P L U N K I N C .
Time to detect and contain
76% experts views
400% increase in Scams

9. © 2 0 1 9 S P L U N K I N C .
Firewall

10. © 2 0 1 9 S P L U N K I N C .
Working of Firewall

11. © 2 0 1 9 S P L U N K I N C .
Firewall Logs 1) Traffic Logs
2) System Monitoring Logs
3) DHCP Logs
4) Security Policy Control Logs

12. © 2 0 1 9 S P L U N K I N C .
Widely used Firewalls

13. © 2 0 1 9 S P L U N K I N C .
Avotrix Architecture
Zyxel Firewall
Avotrix Employees
Hackers

14. © 2 0 1 9 S P L U N K I N C .
ZyXEL
firewall logs
in Splunk

15. © 2 0 1 9 S P L U N K I N C .
ZyXel Firewall
app for Splunk

16. © 2 0 1 9 S P L U N K I N C .
Installation
and
Configuration
1) Installation
2) Configuration

17. © 2 0 1 9 S P L U N K I N C .
ZyXEL Firewall Log Analytics Using Splunk

18. © 2 0 1 9 S P L U N K I N C .
Usage Statistics

19. © 2 0 1 9 S P L U N K I N C .
Security

20. © 2 0 1 9 S P L U N K I N C .
Questions?

21. Thank You
© 2 0 1 9 S P L U N K I N C .