Integration with IBM Qradar

[DCIM_Support]

Hi All,

It is possible to integrate Straxureware with IBM Qradar?

Regards

Kerem

(CID:105457622)

[DCIM_Support · Accepted solution]

Hi Kerem,

I can't say on the DCO side of things but for DCE, there is no direct integration between IBM Qradar and DCE. I read into it a little and it noted:

At the heart of this product sits a highly scalable database designed to capture real-time log event and network flow data, revealing the footprints of would-be attackers.

DCE can't send logs to other systems nor is anything available specifically in DCE to allow applications to read any network flow. 

I don't know if IBM Qradar can monitor without being actually integrated into the system but that would be a question for IBM.

Steve

(CID:105457629)

[DCIM_Support]

Thanks Steve.

(CID:105457632)

[DCIM_Support]

Hi Kerem, please elaborate. A use case or workflow that the customer is trying to target will help the community in giving you a more accurate answer.

(CID:105457631)

[DCIM_Support]

Hi Ajay, My customer wants to integrate DCO&DCE with Qradar. They use Qradar for log security. So they have to know who is log in DCO or DCE? Also, who changed the thresholds or etc.. How can communicate theese tools ? Is it possible to one way audit log information? Thanks for your support. Kerem

(CID:105457638)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.