01-14-2016 12:47 AM
I have comprehensive wireless infrastructure which contains 5 controllers.
Also, I'm using IBM Qradar SIEM to correlate incidents.
I found that Aruba equipment recognized by SIEM as 3com switch. I was trying to delete that entry but it appears again and again.
Now I'm going to investigate it. Now I have a question - does anyone know how does Aruba Networks references with 3com (may be they are using the same LAN ports vendor or something else)?
01-14-2016 04:14 AM
Which equipment, specifically? You might want to ask Qradar about why this happens...
Aruba Customer Engineering
Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base
01-14-2016 04:47 AM
Actually, Aruba is closer for me.
Also, I issued the same question at IBM.
Im just querying - may be someone faced the same problem.
Aruba 3000 controller is recognized by IBM Qradar SIEM as 3com 8800 series switch.
01-22-2016 10:45 AM
I can't answer why, but have dealt with this before with 2 different SIEMs. I had to contact those vendors to get a fix. Something different about the format of the logs.
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.