Wireless Access

Contributor I

Aruba Networks in IBM Qradar

Hi everyone.
I have comprehensive wireless infrastructure which contains 5 controllers.
Also, I'm using IBM Qradar SIEM to correlate incidents.
I found that Aruba equipment recognized by SIEM as 3com switch. I was trying to delete that entry but it appears again and again.
Now I'm going to investigate it. Now I have a question - does anyone know how does Aruba Networks references with 3com (may be they are using the same LAN ports vendor or something else)?

Guru Elite

Re: Aruba Networks in IBM Qradar

Which equipment, specifically?  You might want to ask Qradar about why this happens...

*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Contributor I

Re: Aruba Networks in IBM Qradar

Actually, Aruba is closer for me.
Also, I issued the same question at IBM.
Im just querying - may be someone faced the same problem.
Aruba 3000 controller is recognized by IBM Qradar SIEM as 3com 8800 series switch.

Trusted Contributor I

Re: Aruba Networks in IBM Qradar

I can't answer why, but have dealt with this before with 2 different SIEMs.  I had to contact those vendors to get a fix.  Something different about the format of the logs.

If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
Search Airheads
Showing results for 
Search instead for 
Did you mean: