<html lang="en">
<body>
  
<p>
    <b>[OOTB] Kaspersky NGFW CEF. Version 1</b><br>
	This is the first version of the package.<br>
	Changelog:
	<ul>
		<li>Main normalizer was changed. Mapping was edited. Mapping of event field "ICMPType" was removed from the KUMA field OldFileType. Mapping of event field "ICMPCode" was removed from the KUMA field FlexNumber1. Mapping of event field "TCPRedirected" was removed from the KUMA field S.TCPRedirected. Mapping of event field "ApplicationServiceName" was removed from the KUMA field "SA.ApplicationName". Mapping of event field "ApplicationServiceCategory" was removed from the KUMA field SA.ApplicationCategory. Mapping of event field "KasperskyNGFWWebControlProfile" was removed from the KUMA field "FlexString1". Mapping of event field "KasperskyNGFWDNSSecurityProfile" was removed from the KUMA field "DeviceCustomString4". Mapping of event field "KasperskyNGFWAntivirusProfile" was removed from the KUMA field "FlexString2". Mapping of event field "KasperskyNGFWIDPSProfile" was removed from the KUMA field "DeviceCustomString6".</li>
		<li>Main normalizer was changed. Mapping was edited. Event field "KasperskyNgfwFullMatch" was mapped to the KUMA field "S.FullMatch". Event field "KasperskyNgfwIcmpСode" was mapped to the KUMA field N.IcmpType. Event field "KasperskyNgfwIcmpСode" was mapped to the KUMA field "N.IcmpСode". Event field "KasperskyNgfwTcpRedir" was mapped to the KUMA field "S.TcpRedir". Event field "KasperskyNgfwAppName" was mapped to the KUMA field "SA.ApplicationName". Event field "KasperskyNgfwAppCat" was mapped to the KUMA field "SA.ApplicationCategory". Event field "sourceZoneExternalID" was mapped to the KUMA field "S.SourceZone". Event field "destinationZoneExternalID" was mapped to the KUMA field "S.DestinationZone". Event field "KasperskyNgfwWebControlProfile" was mapped to the KUMA field S.WebControlProfile. Event field "S.DnsProfile". Event field "KasperskyNgfwAvProfile" was mapped to the KUMA field "S.AvProfile". Event field "KasperskyNgfwIdpsProfile" was mapped to the KUMA field S.IdpsProfile. Event field "KasperskyNgfwSrcCountry" was mapped to the KUMA field SourceCountry. Event field "KasperskyNgfwDstCountry" was mapped to the KUMA field DestinationCountry. Event field "KasperskyNGFWNatRule" was mapped to the KUMA field S.NatRuleName. Event field "KasperskyNgfwExplicitProxy" was mapped to the KUMA field S.ExplicitProxy. Event field "KasperskyNgfwWebControlProfile" was mapped to the KUMA field S.WebContolProfile. Event field "KasperskyNgfwWebCat" was mapped to the KUMA field SA.WebCategory. Event field "KasperskyNgfwMitreTT" was mapped to the KUMA field SA.MITRE. Event field "dcs4" was mapped to the KUMA field DeviceCustomString4. Event field "dcs4Label" was mapped to the KUMA field DeviceCustomString4Label.</li>
		<li>Extra normalizer was removed.</li>
		<li>Mutation was added to the event field KasperskyNgfwIcmpСode (replace "N/A" with empty string).</li>
</p>

</body>
</html>