Google Cloud Platform Firewall

The IBM QRadar DSM for Google Cloud Platform Firewall collects Google Cloud Pub/Sub events from a Google Cloud Platform Firewall service.

To integrate Google Cloud Platform Firewall with QRadar, complete the following steps:
  1. If automatic updates are not enabled, RPMs are available for download from the IBM® support website (http://www.ibm.com/support). Download and install the most recent version of the following RPMs on your QRadar Console:
    • DSM Common RPM
    • Google Cloud Firewall Platform DSM RPM
    • Protocol GoogleCloudPubSub RPM
    • Protocol GoogleCommon RPM
  2. Configure your Google Cloud Platform Firewall service to send events to QRadar. For more information, see Configuring Google Cloud Platform Firewall to communicate with QRadar®.
  3. Add a Google Cloud Platform Firewall log source on the QRadar Console. For more information, see Google Cloud Pub/Sub log source parameters for Google Cloud Platform Firewall.