Cisco ASA

You can integrate a Cisco Adaptive Security Appliance (ASA) with IBM QRadar.

A Cisco ASA DSM accepts events through syslog or NetFlow by using NetFlow Security Event Logging (NSEL). QRadar records all relevant events. Before you configure QRadar, you must configure your Cisco ASA device to forward syslog or NetFlow NSEL events.

Choose one of the following options:

• Forward events to QRadar by using syslog. See Integrate Cisco ASA Using Syslog
• Forward events to QRadar by using NetFlow (NSEL). See Integrate Cisco ASA for NetFlow by using NSEL