McAfee Web Gateway DSM integration process

You can integrate McAfee Web Gateway DSM with IBM® QRadar®.

Use the following procedure:
  • Download and install the most recent version of the McAfee Web Gateway DSM RPM from the IBM Support Website onto your QRadar Console.
  • For each instance of McAfee Web Gateway, configure your McAfee Web Gateway VPN system to enable communication with QRadar.
  • If QRadar does not automatically discover the log source, for each McAfee Web Gateway server you want to integrate, create a log source on the QRadar Console.
  • If you use McAfee Web Gateway v7.0.0 or later, create an event map.

Related tasks

Configuring McAfee Web Gateway to communicate with QRadar (syslog)

Configuring McAfee Web Gateway to communicate with IBM QRadar (log file protocol)

Creation of an event map for McAfee Web Gateway events