Cisco Duo DSM specifications
When you configure the Cisco Duo DSM, understanding the specifications for the DSM can help ensure a successful integration. For example, knowing what the supported version of Cisco Duo is before you begin can help reduce frustration during the configuration process.
The QRadar DSM for Cisco Duo collects authentication events from the Cisco Duo Admin API.
The following table describes the specifications for the Cisco Duo DSM.
| Specification | Value |
|---|---|
| Manufacturer | Cisco |
| DSM name | Cisco Duo |
| RPM file name | DSM-CiscoDuoSecurity-QRadar_version-build_number.noarch.rpm |
| Supported version | Admin API v2 |
| Protocol | Cisco Duo |
| Event format | JSON |
| Recorded event types | Authentication logs |
| Automatically discovered? | yes |
| Includes identity? | yes |
| Includes custom properties? | no |
| More information | Cisco Duo documentation about the Admin API (https://duo.com/docs/adminapi#about-the-admin-api) |