OSSIM
The synchronization of OSSIM can be done in three different parts of the platform:
In the section Analysis, option
In the section Analysis, option
In the section Management, option
CMDB
In the top bar you can view the button Synchronize→OSSIM.
When you click on the button 'Synchronize',it will be required to enter the password on the top bar of the table, and it will show the specific screen to carry out the synchronization.
In the left side there are items which exist in OSSIM. If you click on one item, it will show the information of the item in the right side of the screen.
There is the possibility of synchronizing the items of OSSIM with Cis of the CMDB of GlobalSUITE or to ignore them.
There are two possibilities for synchronizing both items:
1.Selecting the items of OSSIM and clicking on the button 'Synchronize', in this way a new CI will be created by each element synchronized.
When you relate the items of OSSIM with the Cis which already exist, selecting the CI on which you want to relate and it will be updated with its own data if we click on 'Synchronize', in case you don't click on the button, they will be related solely.
Compliance
The synchronization can be done through the list of SOA, and it's possible when you synchronize all controls or one by one of the SOA. Furthermore, GlobalSUITE allows the synchronization of the SOA which is active solely.
In the top bar of the list you can view the button Synchronize->OSSIM, it will be always available when you have selected the available SOA .
When you click on the button 'Synchronize', it will be required to enter the password on the top bar of the table, and they will be updated all SOA controls of GlobalSUITE with the values which the SOA has in OSSIM.
In the top bar of the SOA you can view the button Synchronize->OSSIM, it will be always available when you have selected the available control.
When you click on the button 'Synchronize', it will be required to enter the password on the top bar of the table, and it will appear the appropriate screen to carry out the synchronization.
In the emergent window are shown the control data which are in OSSIM and when you click on the button ‘Restore’, these data will be updated in the SOA of GlobalSUITE.
Incidents & Problems
In the top bar you find the button Synchronize→OSSIM.
If you click on the button ‘Synchronize’, it will be requested to enter your access password in the top bar of the table and it will display the screen to carry out the synchronization.
In the left side you can see the incidents which have been generated in OSSIM. If you select one incident, the information will be shown in the right side.
You have the option to synchronize the incidents of OSSIM with the Incidents of GlobalSUITE or ignore them.
In case you want to synchronize both incidents, there are 2 ways:
Select the incidents of OSSIM and click on the button ‘Synchronize’, thus an incident will be created by each incident which have been synchronized from OSSIM.
Relate the incidents of OSSIM with the Incidents of GlobalSUITE which already exist, select the incident you want to relate and it will be updated with the data of the other incidents if we click on the button ‘Synchronize’.