The IBM® QRadar®DSM for Cisco Duo collects Cisco Duo logs by using the Cisco Duo protocol.
To integrate Cisco Duo with QRadar, complete the following steps:
- If automatic updates are not enabled, download the most recent versions of the RPMs from the
IBM support website (https://www.ibm.com/support).
- Universal Cloud REST API protocol
- Cisco Duo protocol RPM
- Cisco Duo DSM RPM
- Configure Cisco Duo to communicate with QRadar by configuring the Admin API on your Cisco Duo dashboard. For more information, see Configuring Cisco Duo to communicate with QRadar.
- Add a Cisco Duo log source on the QRadar Console by using the Cisco Duo protocol. For more information, see Cisco Duo protocol log source parameters for Cisco Duo.