Security Operations Center (SOC) analysts and incident administrators require streamlined, automated workflows to effectively triage, review, and resolve data security risks. Enterprise Data Loss Prevention (E-DLP) now supports syslog forwarding to enable your data security administrators to integrate Enterprise DLP into your organization’s automatic incident integration within your established security operations platforms. Your data security administrator can create a Log Forwarding profile to automatically forward DLP incident syslogs to your third-party security information and event management (SIEM), Security Orchestration, and Response (SOAR), or other automated ticketing systems.

Enterprise DLP syslog forwarding provides substantial flexibility for large organizations. Your data security administrators can configure a single Log Forwarding profile for multiple enforcement points, or conversely, create a different Log Forwarding profile for each channel. They can also associate the same enforcement channel with multiple Log Forwarding profiles.

Enterprise DLP forwards DLP incident syslogs over a UDP or TCP port and requires a persistent connection to the receiving endpoint (SIEM, SOAR, or ticketing system). While Enterprise DLP automatically continues forwarding incident syslogs after connectivity is restored, the system cannot forward any syslogs that were generated during the period of disconnection. This integration into established systems allows teams to quickly incorporate data security risks into their operational cadence.

Application tests now use top-level domains or IP addresses instead of App-IDs to make it easier for you to define the targets for your application tests and provide better coverage for an application and its subdomains. Now, when you use a top-level domain as the target of your application test, the test also probes the subdomains so you can identify if any of the subdomains are causing experience issues.

A new licensing structure for Strata Cloud Manager is now available, featuring two licensing tiers: Strata Cloud Manager Essentials and Strata Cloud Manager Pro. This unified structure streamlines the deployment of network security offerings, including AIOps for NGFW, Autonomous Digital Experience Management (ADEM), cloud management functionality, and Strata Logging Service. Strata Cloud Manager offers a unified experience with the products accessible through a single interface, though you require separate licenses for each product to integrate them into the platform.

Here’s an overview of the two licensing tiers available for Strata Cloud Manager:

Strata Cloud Manager Essentials and Strata Cloud Manager Pro are available to activate in customer support portal (CSP) accounts that don't have: Strata Logging Service with sized storage, AIOps for NGFW Free or Premium, or Prisma Access.

For a detailed comparison of the available features and to learn more about how to activate these licenses, visit Strata Cloud Manager License.