How SIEM can help when we have open network like each user is using their home Wi-Fi to use all the business apps and systems remotely? because we don't have controlled network like VPN or any other which is fully controlled by IT team where we can monito

Question

How SIEM can help when we have open network like each user is using their home Wi-Fi to use all the business apps and systems remotely? because we don't have controlled network like VPN or any other which is fully controlled by IT team where we can monito

Vinod Survase 4,776

How SIEM can help when we have open network like each user is using their home Wi-Fi to use all the business apps and systems remotely? because we don't have controlled network like VPN or any other which is fully controlled by IT team where we can monitor the network or systems?

JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2024-01-09T19:08:25.6333333+00:00

@Vinod Survase

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

1 answer

Your answer

JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2024-01-09T19:08:25.6333333+00:00

@Vinod Survase

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Answer 1

Clive Watson 7,866 MVP Volunteer Moderator

You'd usually monitor Sign-ins from AAD (Entra) within Microsoft Sentinel. If you have Defender for Endpoint (on the users devices) or Microsoft Defender for Cloud Apps - you can use those logs with Microsoft Sentinel for monitoring the systems (but not network level logs)

Vinod Survase 4,776 Reputation points

2024-01-10T07:46:12.3466667+00:00

Hi Clive Watson

Thanks for reply here.

We have Defender for Endpoint (on the users devices) or Microsoft Defender for Cloud Apps and Entra ID P2 license as well in the tenant.

And yeah as you mentioned we wont be able to monitor network level as we don't have monitored network as of now.

So what all would be other scenarios or use cases we can do in this case?
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Share via

How SIEM can help when we have open network like each user is using their home Wi-Fi to use all the business apps and systems remotely? because we don't have controlled network like VPN or any other which is fully controlled by IT team where we can monito

1 answer

Your answer