Cisco ISE 2.X integration with QRadar

Documentation (https://www.ibm.com/support/knowledgecenter/SS42VS_7.2.8/com.ibm.dsm.doc/c_DSM_guide_Cisco_ISE_intro.html) specifically specifies “Cisco ISE versions 1.1” as supported.

“The Cisco Identity Services Engine (ISE) DSM for IBM® Security QRadar® accepts syslog events from Cisco ISE appliances with log sources configured to use the UDP Multiline protocol.

QRadar supports syslog events that are forwarded by Cisco ISE versions 1.1. ”

Anybody tried integrating with Cisco ISE 2.X ?

Related:

Leave a Reply