DNS Filter Beta

Overview

DNS Filter is a network auditing monitoring tool used by IT Administrator that provides industry-leading DNS threat protection and content filtering. This page describes how to configure the DNS Filter integration with ConnectWise SIEM, which requires you to enable the export of data from your DNS Filter Dashboard and set up the integration in ConnectWise SIEM.

Note: This integration is only available to Beta Partners.

Your first step is to enable the export of data to an Amazon S3 bucket.

Log in to your DNS Filter account to access the Dashboard.
Navigate to Integrations > Amazon S3.
Navigate to Get Started > Configure Data Export > Amazon S3 and click Continue.
Under Settings, switch the Include column headers in export toggle to enable this option. Please note that this step is mandatory.
Fill out all the required details including your Bucket, Region, Access Key ID, and Secret Access Key.
Click Verify and Test Account. When verified, click Finalize and return to the Dashboard.

Your next step is to set up the integration in ConnectWise SIEM.

Note: The same bucket cannot be used for two or more partners. ConnectWise SIEM integration with DNSFilter can only use one bucket per Org ID.

Log in to the ConnectWise SIEM application.
Navigate to Settings > Integrations.
Under Available Integrations, locate the DNS Filter integration and click Install.
Under Authentication, enter your Secret Access Key, Access Key ID, Bucket Name, and Org ID.
Note: Refer to the Amazon Security Blog for details on how to find your Secret Access Key and Access Key ID.

Note: You can find the Org Key in your DNS Filter Dashboard by clicking on the Support menu.
Click Save.
Click Test authentication.
Under Configuration, switch the toggle to enable log collection.