Orion Application Discovery - Check Point CheckMates

Orion Application Discovery

SmartEvent Type: Views, Views & Reports

Application Control support SolarWinds app from late 2016.

There are two major signatures related:

• SolarWinds - represent the usage of the web application
• SolarWinds-NPM - represent the management (Orion or other) instance in the network.

In this dashboard, you are able to understand the traffic usage of the SolarWinds app, focusing on exfiltration flow from the network using the backdoor in the Orion instance.

TO ACCESS CHECKMATES TOOLBOX

REGISTER
SIGN IN

Disclaimer

Check Point does not provide maintenance services or technical or customer support for third party content provided on this Site, including in CheckMates Toolbox. See also our Third Party Software Disclaimer.

Previous Topics

• FreakOut – Cyber Attack Report
• sk171213 VPN Clients - SmartEvent template to list VPN client version regarding sk171213

About CheckMates

• Getting Started & FAQ
• Community Guidelines

Learn Check Point

• Check Point for Beginners
• Check Point Trivia
• CheckFlix Videos

Advanced Learning

• Check Point Security Masters
• Tip of the Week
• TechTalks
• Training and Certification

Resources

• CheckMates Toolbox
• Developers (Code Hub)
• Product Announcements
• Upcoming Events

Non-English Discussions

• Español
• French
• Japanese
• Português
• Russian
• Chinese