cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1395
Views
0
Helpful
1
Replies

ISE with ArcSight integration

ibrahim_hassan
Beginner
Beginner

I am searching for documents on Cisco ISE that describe how we can integrate it with HP ArcSight , I didn't find such document on Cisco.com.

Are you have any of them?

1 Reply 1

jan.nielsen
Rising star
Rising star

I have not seen any ArcSight specific documents, but as with any SIEM, you really just need to get ISE to send the relevant event categories as syslog to the SIEM, and go from there.

 

Menu :

Administration/System/Logging/Remote Logging Targets

to create a syslog server connection

and

Administration/System/Logging/Logging Categories

to select which event categories should be sent to that syslog server

 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers