Integrations
Cisco and WitFoo
WitFoo supports 16 Cisco products. Their output is parsed, deduplicated and correlated with the rest of your stack on the way in — no per-connector fee, and no parser for your team to maintain.
Supported Cisco products
| Product |
|---|
| Firepower |
| Cisco Ironport |
| Cisco Threat Response |
| Cisco Wireless |
| Cisco ISE |
| Cisco Network Operating System |
| Web Security Appliance (WSA) |
| Access Control Server (ACS) |
| Cisco Meraki Firewall |
| PIX Firewall |
| Stealthwatch |
| Advanced Malware Protection (AMP) |
| ASA Firewall |
| Meraki |
| Umbrella |
| Duo |
Sending this data somewhere else today? Conductor can sit in front of an existing SIEM and cut what you forward to it, or feed WitFoo Analytics directly. Either way the licence is flat per appliance, not per gigabyte.
What WitFoo does with Cisco data
Every supported product is handled the same way, which is the point: you should not have to care which vendor emitted a record in order to investigate it.
-
Ingest, without a parser to write. Adaptive parsing learns the format, so a vendor changing their log layout is our problem rather than yours.
-
Deduplicate. ProtoGraph collapses the same event reported by several tools into one piece of evidence instead of several alerts.
-
Correlate. Records join the graph alongside every other source, so an incident is assembled from whatever actually saw it.
-
Hand off. Output is JSON, CEF or syslog to any downstream SIEM, SOAR or data lake — including one you already own.
Cisco is one of 102 vendors and 158 products supported. Core integrations ship in every tier; full integration support is included in Pro and Max.
Priced per appliance, not per connector.
Adding Cisco — or any of the other 142 supported products — does not change your bill. Data rates are unlimited in every tier.