topic CISCO ASA Firewall connection to Cortex XDR in Cortex XDR Discussions

CISCO ASA Firewall connection to Cortex XDR

Neville-Bowyer — Fri, 04 Sep 2020 10:45:32 GMT

Hi,

We have an environment where by we have CISCO ASA Firewalls, our Client Base would communicate with a Proxy Server and then this would pass the details onto the Firewall and the ASA Firewalls would then communicate with Cortex XDR.

As Cortex XDR requirements are to use FQDN instead of IP, has anybody had any experience of using CISCO ASA's with Cortex XDR if so would you be able to explain how you managed to get this to work.

Many thanks in advance

Re: CISCO ASA Firewall connection to Cortex XDR

DKasabji — Sun, 13 Sep 2020 15:01:58 GMT

In order to get Cisco ASA logs, you would need to spin up a Syslog Collector Applet on your Broker VM. And then you would configure that Syslog Collector to send logs to Cortex XDR.

See more: https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/set-up-network-analysis-and-detection/ingest-logs-and-alerts-from-external-sources/ingest-logs-from-cisco-asa-firewalls.html