Cisco Duo

The IBM QRadarDSM for Cisco Duo collects Cisco Duo logs by using the Cisco Duo protocol.

To integrate Cisco Duo with QRadar, complete the following steps:
  1. If automatic updates are not enabled, download the most recent versions of the RPMs from the IBM® support website (https://www.ibm.com/support).
    • Universal Cloud REST API protocol
    • Cisco Duo protocol RPM
    • Cisco Duo DSM RPM
  2. Configure Cisco Duo to communicate with QRadar by configuring the Admin API on your Cisco Duo dashboard. For more information, see Configuring Cisco Duo to communicate with QRadar®.
  3. Add a Cisco Duo log source on the QRadar Console by using the Cisco Duo protocol. For more information, see Cisco Duo protocol log source parameters for Cisco Duo.