Google Cloud Platform Firewall

The IBM® QRadar® DSM for Google Cloud Platform Firewall collects Google Cloud Pub/Sub events from a Google Cloud Platform Firewall service.

To integrate Google Cloud Platform Firewall with QRadar, complete the following steps:
  1. If automatic updates are not enabled, RPMs are available for download from the IBM support website (http://www.ibm.com/support). Download and install the most recent version of the following RPMs on your QRadar Console:
    • DSM Common RPM
    • Google Cloud Firewall Platform DSM RPM
    • Protocol GoogleCloudPubSub RPM
    • Protocol GoogleCommon RPM
  2. Configure your Google Cloud Platform Firewall service to send events to QRadar. For more information, see Configuring Google Cloud Platform Firewall to communicate with QRadar.
  3. Add a Google Cloud Platform Firewall log source on the QRadar Console. For more information, see Google Cloud Pub/Sub log source parameters for Google Cloud Platform Firewall.