Cisco ASA

You can integrate a Cisco Adaptive Security Appliance (ASA) with the QRadar® product.

A Cisco ASA data source type accepts events through syslog or NetFlow by using NetFlow Security Event Logging (NSEL). the QRadar product records all relevant events. Before you configure the QRadar product, you must configure your Cisco ASA device to forward syslog or NetFlow NSEL events.

Choose one of the following options:

If you are an IBM® QRadar user, see Terminology changes for QRadar customers.