---
title: SecureW2
description: >-
  Ingest SecureW2 authentication, certificate, and device enrollment logs which
  can be analyzed with Datadog Cloud SIEM.
breadcrumbs: Docs > Integrations > SecureW2
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# SecureW2
Integration version1.0.0
{% callout %}
# Important note for users on the following Datadog sites: us2.ddog-gov.com

{% alert level="info" %}
To find out if this integration is available in your organization, see your [Datadog Integrations](https://app.datadoghq.com/integrations) page or ask your organization administrator.

To initiate an exception request to enable this integration for your organization, email [support@ddog-gov.com](mailto:support@ddog-gov.com).
{% /alert %}

{% /callout %}

## Overview{% #overview %}

[SecureW2](https://www.securew2.com/) is a certificate-based network access control (NAC) and passwordless authentication platform for Wi-Fi and wired 802.1X networks, providing device onboarding, certificate issuance and revocation, and RADIUS-based authentication decisions.

This integration ingests SecureW2 logs into Datadog Log Explorer, where they can be analyzed with [Datadog Cloud SIEM](https://www.datadoghq.com/dg/security/siem-solution). SecureW2's Data Enrichment Service streams enriched events to Datadog's log intake over HTTPS/JSON in near real time.

- **Authentication events (RADIUS/802.1X)**: `Access-Accept` and `Access-Reject` decisions, including the reason for a rejection, the user and device identifiers, the access point, and any client certificate details — supporting investigation of failed or anomalous network authentication.
- **Certificate lifecycle events**: certificate issuance and revocation, supporting audit and compliance workflows.
- **Device enrollment events**: device onboarding, configuration, and connection activity via JoinNow.

Use this integration to bring SecureW2 network access telemetry into Datadog alongside your existing IdP, MDM, and EDR signals for correlation, alert triage, and incident investigation.

## Setup{% #setup %}

SecureW2 pushes events to Datadog as logs through its Data Enrichment Service. Datadog does not poll SecureW2.

**Note:** The SecureW2 Data Enrichment Service is a paid SecureW2 subscription and must be enabled on your SecureW2 account before Datadog can receive data. Contact your SecureW2 account team to enable it.

### Webhook Configuration{% #webhook-configuration %}

1. Copy the generated webhook URL from the **Configure** tab on the [SecureW2 integration tile](https://app.datadoghq.com/integrations/securew2).
1. Sign in to the SecureW2 Management Portal.
1. Open the **Data Enrichment Service** configuration and select the **General** SIEM option.
1. Paste the generated URL from Step 1 as the destination endpoint.
1. If your network filters outbound traffic, allow egress to Datadog's [log intake IP ranges](https://docs.datadoghq.com/api/latest/ip-ranges.md) so SecureW2's event stream can reach Datadog. (No inbound allowlisting is required in Datadog — the intake endpoint is public.)
1. Save the configuration. Events appear in the [Log Explorer](https://docs.datadoghq.com/logs/explorer.md) under `source:securew2` shortly after SecureW2 begins streaming.

If you don't see your data, confirm your log index configuration in **Logs** > **Indexes** matches `source:securew2`, and verify the Data Enrichment Service is enabled and saved.

## Data Collected{% #data-collected %}

### Metrics{% #metrics %}

The SecureW2 integration does not include any metrics.

### Service Checks{% #service-checks %}

The SecureW2 integration does not include any service checks.

### Events{% #events %}

The SecureW2 integration does not include any events.

### Logs{% #logs %}

SecureW2 events appear as logs under the `securew2` source:

- Authentication events (RADIUS/802.1X `Access-Accept` / `Access-Reject`)
- Certificate lifecycle events (issuance and revocation)
- Device enrollment events

## Support{% #support %}

Need help? Contact [Datadog support](https://docs.datadoghq.com/help/) or [SecureW2 support](https://www.securew2.com/support).