Microsoft ISA
The Microsoft Internet and Acceleration (ISA) DSM for IBM® QRadar® accepts events by using syslog.
You can integrate Microsoft ISA Server with QRadar by using WinCollect. For more information, see the IBM QRadar WinCollect User Guide.
Note: The Microsoft ISA DSM also supports events from Microsoft Threat Management Gateway by using WinCollect.