Cisco Identity Service Engine - ISE

[RSAAdmin]

I am looking at the potential of RSA EnVision capturing log events from Cisco's Identity Service Engine (ISE). I see it is on the list of supported products via syslog. Most SIEMs can not parse ISE events. Does EnVision actually get and parse the ISE events of all the user activity? Or does it just get syslog events from the underlying system?

Thanks,

Greg

[RSAAdmin]

Hi Greg,

Did you get anywhere with ISE on enVision?

[RSAAdmin]

RSA Supports if ISE version is 1.1 or below. It will collect all logs.