Data Uploaded to Remote Networks

The Data Uploaded to Remote Networks model monitors external domain data usage for each user and alerts on abnormal behavior.

Enable the Data Uploaded to Remote Networks machine learning model to display the actual and expected (learned) amount of local to remote upload volume for each user on the User Details page. When the actual number of external domain data usage exceeds the model’s predicted number, a Sense Event is generated to increase the user’s risk score.

Event name

UBA : Abnormal Volume of Data to External Domains

sensevalue

5

Required configuration

Custom event property "Bytes Sent" must exist for the desired log source type.

Log source types

Pulse Secure Pulse Connect Secure, Fortinet FortiGate Security Gateway, Blue Coat SG Appliance, Juniper SRX Series Services Gateway, Microsoft ISA, Citrix NetScaler