Cisco IWAN

Version : Cisco IWAN

Cisco’s IWAN is the solution that gives IT the visibility and control over the network. With Cisco Integrated Services Router (ISR) together with the ISR-AX license bundle, you can run services like Application Visibility and Control (AVC), that gives you visibility to see your network traffic from a Layer 7 point of view and see the actual application name and the protocol that it’s using.

Netsurion Open XDR can generate flex reports, trigger alerts for web access, interface status changes, user authentication failure and SSL VPN authentication.

Netsurion Data Source Integrations for Cisco IWAN allows you to monitor the following components:

  • Security –  Website access allowed or blocked.
  • Operation – Interface status changes.
  • Compliance – User login and logout activity, user login failure, VPN user login and logout activity, VPN user authentication failure, SSH authentication success and failure and user authentication success and failure.

Once Cisco IWAN is configured to deliver events to Netsurion Open XDR Manager; alerts, dashboards and reports can be configured into Netsurion Open XDR.

The following are the key Data Source Integration available in Netsurion Open XDR.

Alerts

Type Name Description
Operations Cisco IWAN – Chassis Alarm This alert will be generated when a chassis alarm is triggered.
Operations Cisco IWAN – Hardware Device Failed This alert will be generated when a hardware failure occurs.
Operations Cisco IWAN – Internal Software Error This alert will be generated when a software error occurs.
Compliance Cisco IWAN – SSH Authentication Failed This alert will be generated when an authentication failure happens through SSH.
Compliance Cisco IWAN – User Authentication Failed This alert will be generated when a user authentication fails.
Compliance Cisco IWAN – VPN User Authentication Failed This alert will be generated when a VPN user authentication fails.

Reports

Type Name Description
Security Cisco IWAN – Website Access Allowed or Denied This report provides information about accessed URLs allowed or blocked by Cisco IWAN.
Operations Cisco IWAN – Interface Status Changes This report provides information about interface status changes.
Compliance Cisco IWAN – User Login and Logout Activity This report provides information about successful user login and logout.
Compliance Cisco IWAN – User Login Failure This report provides information about user login failures.
Compliance Cisco IWAN – VPN User Login and Logout Activity This report provides information about successful VPN user login and logout.
Compliance Cisco IWAN – VPN User Authentication Failure This report provides information about VPN user authentication failures.
Compliance Cisco IWAN – SSH Authentication Failure This report provides information about SSH authentication failures.
Compliance Cisco IWAN – SSH Authentication Success This report provides information about successful SSH authentication and session open/close.
Compliance Cisco IWAN – User Authentication Success This report provides information about successful user authentication.
Compliance Cisco IWAN – User Authentication Failure This report provides information about user authentication failures.

Documentation

The configuration details are consistent with Netsurion Open XDR 8.x and later and Cisco IWAN.

Download Integration Guide for configuration instructions and more information.