Strata Logging Service
Strata Logging Service Regions
Table of Contents
Expand All
|
Collapse All
Strata Logging Service Docs
Strata Logging Service Regions
Learn more about the regions in which you can host Strata Logging Service.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
The region that you select when you activate Strata Logging Service
determines the physical location in which your data is stored. If regulations require
that your data remain within regional bounds, select the appropriate region to
comply.
Strata Logging Service ensures data redundancy by storing your data in two
different zones in the region you choose. Therefore, in case of an outage, Strata Logging Service will failover to the secondary zone in an attempt to
prevent interruption of service.
If you want to use a third-party app to ingest your Strata Logging Service
log data, ensure that the third-party app is supported in the same region as your
Strata Logging Service instance. Otherwise, the third-party app will be
unable to access your data. Third-party apps are currently supported in only the
following regions:
- United States - Americas
- United Kingdom
- Netherlands - Europe
- Japan
These are the regions in which you can host Strata Logging Service. Each region has
- an address range that you must allow on your syslog or HTTPS server when forwarding logs from Strata Logging Service.
- FQDNs and ports that you must allow on any third-party firewalls you might have between your Palo Alto Networks firewalls and Strata Logging Service. Only Palo Alto Networks firewalls can generate logs for Strata Logging Service.
Products that use Strata Logging Service may support
either all or some of the listed regions. To know which Strata Logging Service
regions your product supports, refer to the respective product documentation. For
instance, Prisma Access supports only a subset of Strata Logging Service
regions.
| Region | Purpose | FQDN or IP Address | TCP Port |
|---|---|---|---|
| Australia | Source IP Addresses for Log Forwarding | 35.244.108.240/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.au1.se1.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-au.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.au1.se1.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-au.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.au1.se1.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.au1.se1.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.au1.se1.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-au.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Canada | Source IP Addresses for Log Forwarding | 34.95.59.80/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.ca1.ne1.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-ca.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.ca1.ne1.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-ca.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.ca1.ne1.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.ca1.ne1.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.ca1.ne1.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-ca.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| China | Source IP Addresses for Log Forwarding | 54.222.227.10, 54.223.157.221, 52.81.134.154 | N/A |
| Firewall Log Ingestion | firewall-prd1.cn1.no1.cdl.prismaaccess.cn | 3978 | |
| *.in2-lc-prod-cn.cdl.prismaaccess.cn | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.cn1.no1.cdl.prismaaccess.cn | 443 | |
| *.fei-lc-prod-cn.cdl.prismaaccess.cn | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.cn1.no1.cdl.prismaaccess.cn | 443 | |
| s3.cn-north-1.amazonaws.com.cn | 443 | ||
| Log Access from Panorama | pcl-prd1.cn1.no1.cdl.prismaaccess.cn | 444 | |
| cdl-prd1.cn1.no1.cdl.prismaaccess.cn | 443 | ||
| *.api2-lc-prod-cn.cdl.prismaaccess.cn | 444 | ||
| License and Tenant Mapping Check | registry-prd1.cn1.no1.cdl.prismaaccess.cn | 444 | |
| France | Source IP Addresses for Log Forwarding | 34.155.98.0/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.fr1.ew9.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-fr.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.fr1.ew9.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-fr.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.fr1.ew9.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.fr1.ew9.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.fr1.ew9.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-fr.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Germany | Source IP Addresses for Log Forwarding | 35.246.195.240/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.de1.ew3.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-de.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.de1.ew3.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-de.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.de1.ew3.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.de1.ew3.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.de1.ew3.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-de.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| India | Source IP Addresses for Log Forwarding | 35.244.35.240/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.in1.as1.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-in.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.in1.as1.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-in.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.in1.as1.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.in1.as1.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.in1.as1.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-in.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Indonesia | Source IP Addresses for Log Forwarding | 34.128.96.0/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.id1.se2.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-id.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.id1.se2.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-id.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.id1.se2.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.id1.se2.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.id1.se2.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-id.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Israel - Tel Aviv | Source IP Addresses for Log Forwarding | 34.165.82.208/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.il1.mw1.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-il.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.il1.mw1.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-il.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.il1.mw1.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.il1.mw1.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.il1.mw1.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-il.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Italy | Source IP Addresses for Log Forwarding | 34.154.10.144/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.it1.ew8.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-it.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.it1.ew8.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-it.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.it1.ew8.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.it1.ew8.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.it1.ew8.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-it.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Japan - Tokyo | Source IP Addresses for Log Forwarding | 34.84.94.80/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.jp1.ne1.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-jp.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.jp1.ne1.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-jp.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.jp1.ne1.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.jp1.ne1.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.jp1.ne1.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-jp.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Korea | Source IP Addresses for Log Forwarding | 34.22.96.0/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.kr1.ne3.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-kr.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.kr1.ne3.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-kr.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.kr1.ne3.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.kr1.ne3.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.kr1.ne3.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-kr.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Netherlands - Europe | Source IP Addresses for Log Forwarding | 154.59.126.0/24, 34.90.138.80/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.nl.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-eu.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.nl.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-eu.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.nl.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.nl.cdl.paloaltonetworks.com | 444 | |
| cortex-prd1.nl.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-eu.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Poland - Warsaw | Source IP Addresses for Log Forwarding | 34.118.66.32/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.pl1.ec2.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-pl.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.pl1.ec2.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-pl.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.pl1.ec2.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.pl1.ec2.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.pl1.ec2.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-pl.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Qatar | Source IP Addresses for Log Forwarding | 34.18.128.0/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.qa1.mc1.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-qa.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.qa1.mc1.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-qa.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.qa1.mc1.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.qa1.mc1.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.qa1.mc1.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-qa.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Saudi Arabia | Source IP Addresses for Log Forwarding | 34.166.52.80/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.sa1.mc2.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-sa.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.sa1.mc2.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-sa.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.sa1.mc2.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.sa1.mc2.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.sa1.mc2.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-sa.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Singapore | Source IP Addresses for Log Forwarding | 34.87.142.80/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.sg1.se1.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-sg.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.sg1.se1.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-sg.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.sg1.se1.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.sg1.se1.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.sg1.se1.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-sg.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Spain | Source IP Addresses for Log Forwarding | 34.175.10.160/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.es1.sw1.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-es.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.es1.sw1.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-es.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.es1.sw1.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.es1.sw1.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.es1.sw1.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-es.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Switzerland | Source IP Addresses for Log Forwarding | 34.65.166.64/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.ch1.ew6.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-ch.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.ch1.ew6.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-ch.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.ch1.ew6.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.ch1.ew6.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.ch1.ew6.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-ch.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| Taiwan | Source IP Addresses for Log Forwarding | 34.81.162.32/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.tw1.ae1.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-tw.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.tw1.ae1.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-tw.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.tw1.ae1.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.tw1.ae1.cdl.paloaltonetworks.com | 444 | |
| cdl-prd1.tw1.ae1.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-tw.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| United Kingdom | Source IP Addresses for Log Forwarding | 35.246.51.240/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.uk.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-uk.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.uk.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-uk.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.uk.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.uk.cdl.paloaltonetworks.com | 444 | |
| cortex-prd1.uk.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-uk.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| United States | Source IP Addresses for Log Forwarding | 65.154.226.0/24, 34.67.106.64/28 | N/A |
| Firewall Log Ingestion | firewall-prd1.us.cdl.paloaltonetworks.com | 3978 | |
| firewall-prd1.us2.cent1.cdl.paloaltonetworks.com | 3978 | ||
| *.in2-lc-prod-us.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-prd1.us.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-us.gpcloudservice.com | 444 | ||
| eal-prd1.us2.cent1.cdl.paloaltonetworks.com | 443 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-prd1.us.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-prd1.us.cdl.paloaltonetworks.com | 444 | |
| cortex-prd1.us.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-us.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| United States Government (High) | Source IP Addresses for Log Forwarding | 34.132.154.128/28 | N/A |
| Firewall Log Ingestion | firewall-highgov.us1.cent1.highgov.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-highgov.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-highgov1.us1.cent1.highgov.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-highgov.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-highgov1.us1.cent1.highgov.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-highgov1.us1.cent1.highgov.cdl.paloaltonetworks.com | 444 | |
| cdl-highgov1.us1.cent1.highgov.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-highgov.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| registry.highgov.cdl.paloaltonetworks.com | 443 | ||
| United States Government (Moderate) | Source IP Addresses for Log Forwarding | 34.67.50.64/28 | N/A |
| Firewall Log Ingestion | firewall-gov.gov.cdl.paloaltonetworks.com | 3978 | |
| *.in2-lc-prod-gov.gpcloudservice.com | 3978 | ||
| Enhanced Application Log Ingestion | fei-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | |
| *.fei-lc-prod-gov.gpcloudservice.com | 444 | ||
| Telemetry and GlobalProtect Troubleshooting Log Ingestion | br-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | |
| storage.googleapis.com | 443 | ||
| Log Access from Panorama | pcl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 | ||
| *.api2-lc-prod-gov.gpcloudservice.com | 444 | ||
| License and Tenant Mapping Check | lic.lc.prod.us.cs.paloaltonetworks.com | 444 | |
| cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com | 443 |
If you plan to use Cortex XDR with Strata Logging Service deployed in the United Kingdom (UK), all Cortex XDR logs
and data reside within the UK boundary, but Cortex XDR will send files that require
analysis to the WildFire cloud for EU. If your compliance and privacy
laws prohibit files from leaving the UK region, disable file uploads to WildFire in your
Malware Security Profiles.