If you need to fulfill your organization's legal compliance
requirements, you can easily forward firewall logs stored in Cortex Data Lake to
external destinations through Prisma Access. For example, you can forward logs using
syslog to a SIEM for long term storage, SOC, or internal audit obligations.
You can forward logs to Microsoft Sentinel.
Before you begin, ensure to set up a Sentinel log analytics workspace.
Create a self-signed certificate or use a public certificate for the
Syslog receiver.