Configuring Radware AppWall to communicate with QRadar

Configure your Radware AppWall device to send logs to IBM QRadar. You integrate AppWall logs with QRadar by using the Vision Log event format.

Procedure

  1. Log in to your Radware AppWall Console.
  2. Select Configuration View from the menu bar.
  3. In the Tree View pane on the left side of the window, click appwall Gateway > Services > Vision Support.
  4. From the Server List tab on the right side of the window, click the add icon (+) in the Server List pane.
  5. In the Add Vision Server window, configure the following parameters:
    Parameter Value
    Address The IP address for the QRadar Console.
    Port 514
    Version Select the most recent version from the list. It is the last item in the list.
  6. Click Check to verify that the AppWall can successfully connect to QRadar.
  7. Click Submit and Save.
  8. Click Apply > OK.