Cisco ASA

You can integrate a Cisco Adaptive Security Appliance (ASA) with the QRadar® product.

A Cisco ASA data source type accepts events through syslog or NetFlow by using NetFlow Security Event Logging (NSEL). the QRadar product records all relevant events. Before you configure the QRadar product, you must configure your Cisco ASA device to forward syslog or NetFlow NSEL events.

Choose one of the following options:

• Forward events to the QRadar product by using syslog. See Integrate Cisco ASA by using Syslog
• Forward events to the QRadar product by using NetFlow (NSEL). See Integrate Cisco ASA for NetFlow by using NSEL

If you are an IBM® QRadar user, see Terminology changes for QRadar customers.