Wireless Access

Reply
Contributor I
Posts: 42
Registered: ‎09-21-2015

Aruba Networks in IBM Qradar

Hi everyone.
I have comprehensive wireless infrastructure which contains 5 controllers.
Also, I'm using IBM Qradar SIEM to correlate incidents.
I found that Aruba equipment recognized by SIEM as 3com switch. I was trying to delete that entry but it appears again and again.
Now I'm going to investigate it. Now I have a question - does anyone know how does Aruba Networks references with 3com (may be they are using the same LAN ports vendor or something else)?

Guru Elite
Posts: 20,821
Registered: ‎03-29-2007

Re: Aruba Networks in IBM Qradar

Which equipment, specifically?  You might want to ask Qradar about why this happens...



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor I
Posts: 42
Registered: ‎09-21-2015

Re: Aruba Networks in IBM Qradar

Actually, Aruba is closer for me.
Also, I issued the same question at IBM.
Im just querying - may be someone faced the same problem.
Aruba 3000 controller is recognized by IBM Qradar SIEM as 3com 8800 series switch.

MVP
Posts: 1,110
Registered: ‎10-11-2011

Re: Aruba Networks in IBM Qradar

I can't answer why, but have dealt with this before with 2 different SIEMs.  I had to contact those vendors to get a fix.  Something different about the format of the logs.

=======================================
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
Search Airheads
Showing results for 
Search instead for 
Did you mean: