1002741690.yaml

id: watchguard
info:
  name: WatchGuard Authentication Gateway SSO
  author: nmap,cn-kali-team
  tags: detect,tech,watchguard,service
  severity: info
  metadata:
    info: System time:$3
    product: authentication_gateway
    rarity: 0
    vendor: watchguard
    verified: true
    version: $1 (Build $2)
tcp:
- name: 'null'
  inputs:
  - data: ''
  host:
  - '{{Hostname}}'
  extractors:
  - name: watchguard
    type: regex
    regex:
    - ^EVENT 354 log info Connected to the WatchGuard Authentication Gateway SSO agent. Version ([\w.]+) Build ([\w]+). Connected at:([\s\w./:]+)To log in to the SSO Agent