CISCO ASA Firewall connection to Cortex XDR

[Neville-Bowyer]

Hi, 

We have an environment where by we have CISCO ASA Firewalls, our Client Base would communicate with a Proxy Server and then this would pass the details onto the Firewall and the ASA Firewalls would then communicate with Cortex XDR. 

As Cortex XDR requirements are to use FQDN instead of IP, has anybody had any experience of using CISCO ASA's with Cortex XDR if so would you be able to explain how you managed to get this to work. 

Many thanks in advance 

[DKasabji]

In order to get Cisco ASA logs, you would need to spin up a Syslog Collector Applet on your Broker VM. And then you would configure that Syslog Collector to send logs to Cortex XDR. 

See more: https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr...