Configuring Cisco Pix to forward events
Configure Cisco Pix to forward events to the QRadar® product.
- Log in to your Cisco PIX appliance by using a console connection, telnet, or SSH.
Type the following command to access Privileged mode:
Type the following command to access Configuration mode:
Enable logging and time stamp the logs:
Set the log level:
logging trap warning
Configure logging to the QRadar product:
logging host <interface> <IP address>
<interface> is the name of the interface, for example, DMZ, LAN, ethernet0, or ethernet1.
<IP address> is the IP address of the QRadar product host.