cancel
Showing results for 
Search instead for 
Did you mean: 

Pulse Secure Connect integration into IBM QRadar

Highlighted
New Contributor

Pulse Secure Connect integration into IBM QRadar

Hello,

do you have guidelines to integrate a Pulse Secure Appliance 3000 with Pulse Secure Connect (PSC) into QRadar.
I would like to get information about:
- how to forward PSC logs to QRadar
- do you know which QRadar DSM must be used to parse the logs?
- do you have a description of the records in the logs to determine which events can be used in Qradar (for example, authentication failure)

Thank you beforehand for your support.

Jean-Marie
Tags (1)
3 REPLIES 3
Highlighted
Not applicable

Re: Pulse Secure Connect integration into IBM QRadar

Jean-Marie,

Pulse Secure purchase the SA (SSL VPN) business from Juniper Networks. The QRadar DSM guide entry for Juniper Networks Secure Access details how to integrate the Pulse Secure Connect product into QRadar.

http://public.dhe.ibm.com/software/security/products/qradar/documents/iTeam_addendum/b_dsm_guide.pdf

It references the old admin UI in the instructions, but that shouldn't be much of a challenge to work through.


Ryan
Highlighted
New Contributor

Re: Pulse Secure Connect integration into IBM QRadar

Ryan,

thanks a million for your swift feedback.
It is really very valuable

Jean-Marie
Highlighted
New Contributor

Re: Pulse Secure Connect integration into IBM QRadar

Hello,

I have an additional question, now that we are ready to integrate the Pulse device into QRadar.
QRadar DSM documentation states that two formats are supported:
- WELF
- SYSLOG
QRadar advise to use WELF if supported.

Could you give some guidance?

Thank you beforehand for your support

Jean-Marie Montrieux