Forum Discussion
bsb
Nimbostratus
NimbostratusASM logs to SIEM
currently f5 system logs are forwarded to mcafee siem, now ASM profiles are enabled and how to identify if the asm logs are also forwarded to siem. any tcpdump to identify asm logs being forwarded. ...
PeteWhite
Employee
EmployeeMake sure that the SIEM is available on the TMM side ie not via the management interface. Do a tcpdump to check whether the traffic is being sent to the SIEM, make sure your SIEM has plenty of power - it's very easy to crash the SIEM server with a BIG-IP.
