Ctrlk
TD Website
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Overview

ThreatDefence provides deep detection and response capabilities to your endpoints, 24x7. For log collection, a virtual system collector is fully configured and managed by ThreatDefence.

The collector ensures secure log delivery over an encrypted TLS channel to the ThreatDefence platform.

The diagram below demonstrates how the collector works:

System Logging Infrastructure

TD-SYSLOG-VM

The TD-SYSLOG-VM is a lightweight Linux virtual appliance that can be hosted on any hypervisor or bare-metal hardware.

  • Supported platforms: VMware, Hyper-V, AWS, and other common hypervisors or cloud providers.

  • ThreatDefence experts can assist with sizing and configuration to match your environment.

Virtual Machine Resource Requirements

Minimum VM resources required:

  • 2 vCPUs

  • 8 GB RAM

  • 200 GB disk space

  • Internet connectivity (TCP 443, TCP 80, UDP 53)

The following domains need to be exempted from any TLS/SSL inspection:

  • tele.threatdefence.io

  • vle.threatdefence.io

For customers using our US infrastructure please allow the below domain in place of vle.threatdefence.io.

  • vle.us.secops-apps.io

Last updated