QRadar configuration

To get the most value out of using the IBM® Security QRadar® Network Visibility content extension, ensure that the following QRadar Network Visibility capabilities are configured before you use the dashboards.

Network Hierarchy

Defining your network hierarchy is an essential step in realizing the value of these dashboards and your QRadar deployment. The network hierarchy can help you to segment your network into regions, groups, and services, and to define local and remote traffic and devices.

These dashboards use the network hierarchy to highlight suspicious activity within a network segment and provide insight into ingress, egress, lateral and external traffic. For more information, see Network hierarchy (ibm.com/docs/en/qsip/7.4?topic=tasks-network-hierarchy).

Asset Management

Maintaining an accurate asset model helps you to identify threats and vulnerabilities by connecting offenses and alerts to assets in your network. Asset profiles can be built dynamically from identity information that is collected from events or flows. Always ensure that the information gathered is accurate and up to date.

These dashboards use the asset model to correlate IP addresses with assets, which help you effectively assess the risk of a potential threat. For more information, see the QRadar User Guide (ibm.com/docs/en/SS42VS_7.4/com.ibm.qradar.doc/b_qradar_users_guide.pdf).

QRadar X-Force Threat Intelligence feed

The QRadar X-Force® Threat Intelligence feed helps you to receive daily updates from X-Force with IP reputation and URL categorization data. X-Force uses a series of data centers across the globe to collect malware samples, analyze web pages and URLs and analyze IP addresses to categorize IP information.

The QRadar Network Visibility dashboards use the insights provide by X-Force to highlight potentially suspicious and harmful behavior within your organization. For more information, see QRadar: X-Force Frequently Asked Questions (FAQ) (ibm.com/support/pages/qradar-x-force-frequently-asked-questions-faq).