Cisco NAC

The Cisco NAC DSM for IBM QRadar accepts events by using syslog.

QRadar records all relevant audit, error, failure events, quarantine, and infected system events. Before you configure a Cisco NAC device in QRadar, you must configure your device to forward syslog events.