Third-Party Integration
Trend Vision One enables integrations with key third-party applications and services, allowing you to analyze data from multiple sources and increase visibility into your security.
You can learn about the available integrations in the following locations:
-
Trend Vision One console: The Third-Party Integration screen lists supported integrations that require setup on the console and provides links to their corresponding configuration screens.
-
Trend Micro Automation Center: The Third-Party Integration screen lists applications that allow Trend Micro products and services to integrate with platforms such as Splunk and Azure Sentinel. For more information, see https://automation.trendmicro.com/thirdparty.
The following table outlines the information displayed for integrations that you can configure on the Trend Vision One console.
|
Column |
Description |
|---|---|
|
Integration |
Third-party application or service that integrates with Trend Vision One |
|
Vendor |
Entity that develops or maintains the third-party application or service |
|
Description |
Specific actions or outcomes that the integration enables |
|
Associated apps |
Trend Vision One apps that consume data from or share data with the third-party application or service |
|
Service Gateways |
Devices that enable Trend Vision One to connect to a third-party application that is deployed in the corporate network Important:
You must enable third-party integration on each connected Service Gateway to allow data sharing between Trend Vision One and third-party applications. The Service Gateways column displays any of the following values:
For more information, see Service Gateway Overview. |
|
Connection |
Date and time data was last synchronized between Trend Vision One and the third-party application or service |
- Active Directory (On-Premises) Integration
Synchronize objects and security logs from on-premises Active Directory servers for risk assessments and remediation actions. - Azure AD Integration
Manage access permissions to your Azure AD data in multiple tenants for use in Trend Vision One apps. - Check Point Open Platform for Security (OPSEC) Integration
Trend Vision One enables sharing of suspicious object data with Check Point Open Platform for Security (OPSEC) through a Service Gateway. - FortiGate Next-Generation Firewall Integration
Trend Vision One enables sharing of suspicious object data with FortiGate Next-Generation Firewall through a Service Gateway. - MISP Integration
Trend Vision One enables transfer of suspicious object data to and retrieval of threat intelligence data from the MISP threat sharing platform through a Service Gateway. - Nessus Pro Integration
Integrate your Nessus Pro server through a Service Gateway. - Okta Integration
Grant Trend Micro permission to access your Okta data for use in Trend Vision One apps. - OpenLDAP Integration
Synchronize data from OpenLDAP servers through a Service Gateway. - Palo Alto Panorama Integration
Trend Vision One enables sharing of suspicious object data with Palo Alto Panorama through a Service Gateway. - Plain Text (Freetext) Feed Integration
Trend Vision One enables sharing of suspicious object data with any third-party apps and services that can import data from plain text files through a Service Gateway. - ProxySG and Advanced Secure Gateway Integration
Trend Vision One enables sharing of suspicious object data with ProxySG and Advanced Secure Gateway through a Service Gateway. - QRadar on Cloud with STIX-Shifter Integration
To allow Trend Vision One to receive data from QRadar on Cloud for collaborative threat analysis, you must enable the integration and configure the required STIX-Shifter connection settings. - Rapid7 - Nexpose Integration
Integrate Rapid7 - Nexpose through a Service Gateway. - Splunk HEC Connector Configuration
Share XDR data with Splunk Cloud by configuring the Splunk HEC connector. - Syslog Connector (On-premises) Configuration
Share XDR data with your syslog server by configuring the generic syslog connector. - Syslog Connector (SaaS/Cloud) Configuration
Share XDR data with your syslog server by configuring the generic syslog connector. - TAXII Feed Integration
You can add or edit a TAXII feed you want to subscribe to. - Trend Vision One Connector for Azure Sentinel
The Trend Vision One connector enables Azure Sentinel to automatically ingest Workbench alert data through the Trend Vision One API. - Trend Vision One Connector for ServiceNow ITSM Add-On Integration
The Trend Vision One Connector for ServiceNow ITSM add-on allows you to manage Trend Vision One Workbench alerts directly in ServiceNow. - Trend Micro Vision One for Cortex XSOAR Integration
Set up Trend Vision One for Cortex XSOAR to view Workbench alerts and automate incident response in the Cortex XSOAR console. - Trend Vision One for QRadar (XDR) Add-On Integration
Install the add-on to share and view XDR data in QRadar including Workbench alerts, Observed Attack Techniques, and Trend Micro product detections. - Trend Vision One for ServiceNow Ticketing System Integration
Set up the integration to send tickets to ServiceNow ITSM to be managed in the ServiceNow portal. - Trend Micro Vision One for Splunk (XDR) App Integration
View all your XDR data directly on the Splunk dashboard. - Syslog Content Mapping - CEF
The following tables map syslog content between Trend Vision One log output and CEF syslog types.
