F5 Networks FirePass

The F5 Networks FirePass DSM for IBM QRadar collects system events from an F5 FirePass SSL VPN device using syslog.

By default, remote logging is disabled and must be enabled in the F5 Networks FirePass device. Before receiving events in QRadar, you must configure your F5 Networks FirePass device to forward system events to QRadar as a remote syslog server.