Syslogs are a standard log transport mechanism that enables aggregation of log data from different network devices into a central repository for archiving, analysis, and reporting. You can now create a Log Forwarding profile to automatically forward Enterprise Data Loss Prevention (E-DLP) Data Security incident syslogs to your third-party security information and event management (SIEM), Security Orchestration, and Response (SOAR), or other automated ticketing systems. This enables your SOC Analysts and Incident admins to integrate Enterprise DLP into established workflows to effectively triage, review, and resolve data security risks that occur in your organization. You can configure a single Log Forwarding profile for multiple enforcement points or you can create a different Log Forwarding profile for each. You can associate the same enforcement channel with multiple Log Forwarding profiles.

Enterprise DLP forwards DLP incident syslogs over a UDP or TCP port, and requires a persistent connection to your SIEM, SOAR, or ticketing system to forward DLP incident syslogs. Enterprise DLP can only forward DLP incident syslogs while successfully connected to your SIEM, SOAR, or ticketing system. Enterprise DLP automatically continues forwarding your Enterprise DLP incident syslogs to your SIEM, SOAR, or ticketing system after you restore connectivity. However, Enterprise DLP can't forward any syslogs generated while Enterprise DLP and your SIEM, SOAR, or ticketing system are disconnected.

Application tests now use top-level domains or IP addresses instead of App-IDs to make it easier for you to define the targets for your application tests and provide better coverage for an application and its subdomains. Now, when you use a top-level domain as the target of your application test, the test also probes the subdomains so you can identify if any of the subdomains are causing experience issues.

A new licensing structure for Strata Cloud Manager is now available, featuring two licensing tiers: Strata Cloud Manager Essentials and Strata Cloud Manager Pro. This unified structure streamlines the deployment of network security offerings, including AIOps for NGFW, Autonomous Digital Experience Management (ADEM), cloud management functionality, and Strata Logging Service. Strata Cloud Manager offers a unified experience with the products accessible through a single interface, though you require separate licenses for each product to integrate them into the platform.

Here’s an overview of the two licensing tiers available for Strata Cloud Manager:

Strata Cloud Manager Essentials and Strata Cloud Manager Pro are available to activate in customer support portal (CSP) accounts that don't have: Strata Logging Service with sized storage, AIOps for NGFW Free or Premium, or Prisma Access.

For a detailed comparison of the available features and to learn more about how to activate these licenses, visit Strata Cloud Manager License.