Wider attack surface coverage powered by hundreds of integrations and deeper threat visibility powered by thousands of detections.
Version: Cisco ASA Firewall 5500 Series and later.
Cisco Adaptive Security Appliance (ASA) Software is the core operating system for the Cisco ASA Family.It delivers enterprise-class firewall capabilities for ASA devices in an array of form factors - standalone appliances, blades, and virtual appliances - for any distributed network environment.
Netsurion's Open XDR platform acts as the Syslog Server for Cisco ASA, where Cisco ASA sends Syslog messages via UDP to Appliance's Syslog Listener. The configuration procedures within this document set up Cisco ASA appliances to send Syslog messages to the Cisco Adaptive Security Device Manager (ASDM). Syslog messages are then forwarded to the Netsurion's Open XDR platform from ASDM.
Netsurion Data Source Integration for Cisco Adaptive Security (ASA) allows you to monitor following:-
Once logs are received in to Netsurion, Flex reports and Alerts can be configured into Netsurion.
The following Data Source Integrations are available in Netsurion v7.x and later to support Cisco ASA Firewall monitoring:
The configuration details are consistent with Netsurion version 7.X and later, Cisco ASA Firewall 5500 Series and later.
Download Integration Guide and How-to Guide for more information and to configuration instructions.