IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  FortiWEB WAF DSM

    Posted 08/01/22 12:19 PM
    Hi,

    I'm looking for some advise on FortiWEB DSM. This WAF can send very well structured logs in CEF format, so parsing is not an issue. However there is no offical DSM for mapping so it is hard to use in any rules. Anyone here is already struggling with this, so can share some thoughts with me?

    Thank you
    Laszlo

    ------------------------------
    Vladx(x)
    ------------------------------


  • 2.  RE: FortiWEB WAF DSM

    Posted 08/02/22 01:29 AM
    The only option will be Universal DSM and mapping the event manually. Haven't tried it for FortiWEB.
    https://www.ibm.com/docs/en/dsm?topic=configuration-universal-leef


    ------------------------------
    Brian Kwak
    ------------------------------



Related Content