Configure Forcepoint Sidewinder to communicate with QRadar®

Before you can configure QRadar to integrate with Forcepoint Sidewinder, you must configure syslog on your Forcepoint Sidewinder Firewall Enterprise device.

When you configure your Forcepoint Sidewinder device to forward syslog events to QRadar, export the logs in Sidewinder Export Format (SEF).

For more information about configuring your Forcepoint Sidewinder device, see the Forcepoint Sidewinder Administration Guide (https://www.websense.com/content/support/library/si/v70/mgmt/si_70103_ag_a_en-us.pdf).