Frequently Asked Questions

IBM QRadar SIEM collects data from many sources like Domain Controllers, Windows Servers, Firewalls, Linux, Network Devices, etc. using syslog, agent based and agentless methods.

•  System Authentication -QRadar SIEM authenticates Users locally, which is the default type of authentication.
• TACACS Authentication - Authentication via Terminal Access Controller Access Control System server.
• RADIUS Authentication - Authentication via Remote Authentication Dial-in User Service server.
• Active Directory -  Authentication via Lightweight Directory Access Protocol server using Kerberos.
• LDAP - Authentication via the Native LDAP server.

Encryption takes place between the deployed hosts; therefore, deployment must contain more than one managed host. Encryption is enabled through SSH tunnels initiated from the client.