>
    Strata Copilot
    Strata Logging Service Regions
    Focus
    Download PDF
    Focus
    1. Home
    2. Strata Logging Service
    3. Strata Logging Service Administration
    4. Introduction to Strata Logging Service
    5. Strata Logging Service Regions
    Download PDF
    Strata Logging Service

    Strata Logging Service Regions

    Table of Contents

    Strata Logging Service Regions

    Learn more about the regions in which you can host Strata Logging Service.
    Where Can I Use This?What Do I Need?
    • Prisma Access (Managed by Strata Cloud Manager)
    • Prisma Access (Managed by Panorama)
    • NGFW (Managed by PAN-OS or Panorama)
    • NGFW (Managed by Strata Cloud Manager)
    • Strata Logging Service license
    The region that you select when you activate Strata Logging Service determines the physical location in which your data is stored. If regulations require that your data remain within regional bounds, select the appropriate region to comply.
    Strata Logging Service ensures data redundancy by storing your data in two different zones in the region you choose. Therefore, in case of an outage, Strata Logging Service will failover to the secondary zone in an attempt to prevent interruption of service.
    If you want to use a third-party app to ingest your Strata Logging Service log data, ensure that the third-party app is supported in the same region as your Strata Logging Service instance. Otherwise, the third-party app will be unable to access your data. Third-party apps are currently supported in only the following regions:
    • United States- Americas
    • United Kingdom
    • Netherlands- Europe
    • Japan
    These are the regions in which you can host Strata Logging Service. Each region has
    • an address range that you must allow on your syslog or HTTPS server when forwarding logs from Strata Logging Service.
    • FQDNs and ports that you must allow on any third-party firewalls you might have between your Palo Alto Networks firewalls and Strata Logging Service. Only Palo Alto Networks firewalls can generate logs for Strata Logging Service.
    • Products that use Strata Logging Service may support either all or some of the listed regions. To know which Strata Logging Service regions your product supports, refer to the respective product documentation. For instance, Prisma Access supports only a subset of Strata Logging Service regions.
    • Strata Logging Service is unavailable in FedRAMP environments where Prisma Access is also not present.
    For TCP/3978 Firewall Log Ingestion connections routed through a proxy server, the firewall sends the destination IP address (not the FQDN) in HTTP CONNECT requests. To allow this traffic, resolve the Firewall Log Ingestion FQDNs for your region to their current IP addresses, then configure your proxy server to permit those IP addresses on TCP/3978.
    RegionPurposeFQDN or IP AddressTCP Port
    AustraliaSource IP Addresses for Log Forwarding35.244.108.240/28N/A
    Firewall Log Ingestionfirewall-prd1.au1.se1.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-au.gpcloudservice.com3978
    receptor.au1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.au1.se1.cdl.paloaltonetworks.com443
    *.fei-lc-prod-au.gpcloudservice.com444
    ingest.au1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.au1.se1.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.au1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.au1.se1.cdl.paloaltonetworks.com444
    cdl-prd1.au1.se1.cdl.paloaltonetworks.com443
    *.api2-lc-prod-au.gpcloudservice.com444
    access.au1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    CanadaSource IP Addresses for Log Forwarding34.95.59.80/28N/A
    Firewall Log Ingestionfirewall-prd1.ca1.ne1.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-ca.gpcloudservice.com3978
    receptor.ca1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.ca1.ne1.cdl.paloaltonetworks.com443
    *.fei-lc-prod-ca.gpcloudservice.com444
    ingest.ca1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.ca1.ne1.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.ca1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.ca1.ne1.cdl.paloaltonetworks.com444
    cdl-prd1.ca1.ne1.cdl.paloaltonetworks.com443
    *.api2-lc-prod-ca.gpcloudservice.com444
    access.ca1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    China
    Strata Logging Service in China has limitations. Review them here.
    Source IP Addresses for Log Forwarding54.222.227.10, 54.223.157.221, 52.81.134.154N/A
    Firewall Log Ingestionfirewall-prd1.cn1.no1.cdl.prismaaccess.cn3978
    *.in2-lc-prod-cn.cdl.prismaaccess.cn3978
    Enhanced Application Log Ingestionfei-prd1.cn1.no1.cdl.prismaaccess.cn443
    *.fei-lc-prod-cn.cdl.prismaaccess.cn444
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.cn1.no1.cdl.prismaaccess.cn443
    s3.cn-north-1.amazonaws.com.cn443
    Log Access from Panoramapcl-prd1.cn1.no1.cdl.prismaaccess.cn444
    cdl-prd1.cn1.no1.cdl.prismaaccess.cn443
    *.api2-lc-prod-cn.cdl.prismaaccess.cn444
    License and Tenant Mapping Checkregistry-prd1.cn1.no1.cdl.prismaaccess.cn444
    FranceSource IP Addresses for Log Forwarding34.155.98.0/28N/A
    Firewall Log Ingestionfirewall-prd1.fr1.ew9.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-fr.gpcloudservice.com3978
    receptor.fr1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.fr1.ew9.cdl.paloaltonetworks.com443
    *.fei-lc-prod-fr.gpcloudservice.com444
    ingest.fr1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.fr1.ew9.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.fr1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.fr1.ew9.cdl.paloaltonetworks.com444
    cdl-prd1.fr1.ew9.cdl.paloaltonetworks.com443
    *.api2-lc-prod-fr.gpcloudservice.com444
    access.fr1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    GermanySource IP Addresses for Log Forwarding35.246.195.240/28N/A
    Firewall Log Ingestionfirewall-prd1.de1.ew3.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-de.gpcloudservice.com3978
    receptor.de1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.de1.ew3.cdl.paloaltonetworks.com443
    *.fei-lc-prod-de.gpcloudservice.com444
    ingest.de1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.de1.ew3.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.de1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.de1.ew3.cdl.paloaltonetworks.com444
    cdl-prd1.de1.ew3.cdl.paloaltonetworks.com443
    *.api2-lc-prod-de.gpcloudservice.com444
    access.de1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    IndiaSource IP Addresses for Log Forwarding35.244.35.240/28N/A
    Firewall Log Ingestionfirewall-prd1.in1.as1.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-in.gpcloudservice.com3978
    receptor.in1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.in1.as1.cdl.paloaltonetworks.com443
    *.fei-lc-prod-in.gpcloudservice.com444
    ingest.in1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.in1.as1.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.in1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.in1.as1.cdl.paloaltonetworks.com444
    cdl-prd1.in1.as1.cdl.paloaltonetworks.com443
    *.api2-lc-prod-in.gpcloudservice.com444
    access.in1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    IndonesiaSource IP Addresses for Log Forwarding34.128.96.0/28N/A
    Firewall Log Ingestionfirewall-prd1.id1.se2.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-id.gpcloudservice.com3978
    receptor.id1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.id1.se2.cdl.paloaltonetworks.com443
    *.fei-lc-prod-id.gpcloudservice.com444
    ingest.id1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.id1.se2.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.id1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.id1.se2.cdl.paloaltonetworks.com444
    cdl-prd1.id1.se2.cdl.paloaltonetworks.com443
    *.api2-lc-prod-id.gpcloudservice.com444
    access.id1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    Israel - Tel AvivSource IP Addresses for Log Forwarding34.165.82.208/28N/A
    Firewall Log Ingestionfirewall-prd1.il1.mw1.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-il.gpcloudservice.com3978
    receptor.il1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.il1.mw1.cdl.paloaltonetworks.com443
    *.fei-lc-prod-il.gpcloudservice.com444
    ingest.il1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.il1.mw1.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.il1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.il1.mw1.cdl.paloaltonetworks.com444
    cdl-prd1.il1.mw1.cdl.paloaltonetworks.com443
    *.api2-lc-prod-il.gpcloudservice.com444
    access.il1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    ItalySource IP Addresses for Log Forwarding34.154.10.144/28N/A
    Firewall Log Ingestionfirewall-prd1.it1.ew8.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-it.gpcloudservice.com3978
    receptor.it1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.it1.ew8.cdl.paloaltonetworks.com443
    *.fei-lc-prod-it.gpcloudservice.com444
    ingest.it1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.it1.ew8.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.it1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.it1.ew8.cdl.paloaltonetworks.com444
    cdl-prd1.it1.ew8.cdl.paloaltonetworks.com443
    *.api2-lc-prod-it.gpcloudservice.com444
    access.it1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    Japan - TokyoSource IP Addresses for Log Forwarding34.84.94.80/28N/A
    Firewall Log Ingestionfirewall-prd1.jp1.ne1.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-jp.gpcloudservice.com3978
    receptor.jp1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.jp1.ne1.cdl.paloaltonetworks.com443
    *.fei-lc-prod-jp.gpcloudservice.com444
    ingest.jp1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.jp1.ne1.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.jp1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.jp1.ne1.cdl.paloaltonetworks.com444
    cdl-prd1.jp1.ne1.cdl.paloaltonetworks.com443
    *.api2-lc-prod-jp.gpcloudservice.com444
    access.jp1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    KoreaSource IP Addresses for Log Forwarding34.22.96.0/28N/A
    Firewall Log Ingestionfirewall-prd1.kr1.ne3.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-kr.gpcloudservice.com3978
    receptor.kr1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.kr1.ne3.cdl.paloaltonetworks.com443
    *.fei-lc-prod-kr.gpcloudservice.com444
    ingest.kr1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.kr1.ne3.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.kr1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.kr1.ne3.cdl.paloaltonetworks.com444
    cdl-prd1.kr1.ne3.cdl.paloaltonetworks.com443
    *.api2-lc-prod-kr.gpcloudservice.com444
    access.kr1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    Netherlands - EuropeSource IP Addresses for Log Forwarding154.59.126.0/24, 34.90.138.80/28N/A
    Firewall Log Ingestionfirewall-prd1.nl.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-eu.gpcloudservice.com3978
    receptor.eu1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.nl.cdl.paloaltonetworks.com443
    *.fei-lc-prod-eu.gpcloudservice.com444
    ingeest.eu1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.nl.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.eu1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.nl.cdl.paloaltonetworks.com444
    cortex-prd1.nl.cdl.paloaltonetworks.com443
    *.api2-lc-prod-eu.gpcloudservice.com444
    access.eu1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    Poland - WarsawSource IP Addresses for Log Forwarding34.118.66.32/28N/A
    Firewall Log Ingestionfirewall-prd1.pl1.ec2.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-pl.gpcloudservice.com3978
    receptor.pl1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.pl1.ec2.cdl.paloaltonetworks.com443
    *.fei-lc-prod-pl.gpcloudservice.com444
    ingest.pl1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.pl1.ec2.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.pl1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.pl1.ec2.cdl.paloaltonetworks.com444
    cdl-prd1.pl1.ec2.cdl.paloaltonetworks.com443
    *.api2-lc-prod-pl.gpcloudservice.com444
    access.pl1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    QatarSource IP Addresses for Log Forwarding34.18.128.0/28N/A
    Firewall Log Ingestionfirewall-prd1.qa1.mc1.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-qa.gpcloudservice.com3978
    receptor.qa1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.qa1.mc1.cdl.paloaltonetworks.com443
    *.fei-lc-prod-qa.gpcloudservice.com444
    ingest.qa1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.qa1.mc1.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.qa1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.qa1.mc1.cdl.paloaltonetworks.com444
    cdl-prd1.qa1.mc1.cdl.paloaltonetworks.com443
    *.api2-lc-prod-qa.gpcloudservice.com444
    access.qa1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    Saudi ArabiaSource IP Addresses for Log Forwarding34.166.52.80/28N/A
    Firewall Log Ingestionfirewall-prd1.sa1.mc2.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-sa.gpcloudservice.com3978
    receptor.sa1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.sa1.mc2.cdl.paloaltonetworks.com443
    *.fei-lc-prod-sa.gpcloudservice.com444
    ingest.sa1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.sa1.mc2.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.sa1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.sa1.mc2.cdl.paloaltonetworks.com444
    cdl-prd1.sa1.mc2.cdl.paloaltonetworks.com443
    *.api2-lc-prod-sa.gpcloudservice.com444
    access.sa1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    SingaporeSource IP Addresses for Log Forwarding34.87.142.80/28N/A
    Firewall Log Ingestionfirewall-prd1.sg1.se1.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-sg.gpcloudservice.com3978
    receptor.sg1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.sg1.se1.cdl.paloaltonetworks.com443
    *.fei-lc-prod-sg.gpcloudservice.com444
    ingest.sg1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.sg1.se1.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.sg1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.sg1.se1.cdl.paloaltonetworks.com444
    cdl-prd1.sg1.se1.cdl.paloaltonetworks.com443
    *.api2-lc-prod-sg.gpcloudservice.com444
    access.sg1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    South AfricaSource IP Addresses for Log Forwarding34.35.92.144/28N/A
    Firewall Log Ingestionfirewall-prd1.za1.as1.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-za.gpcloudservice.com3978
    receptor.za1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.za1.as1.cdl.paloaltonetworks.com443
    *.fei-lc-prod-za.gpcloudservice.com444
    ingest.za1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.za1.as1.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.za1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.za1.as1.cdl.paloaltonetworks.com444
    cdl-prd1.za1.as1.cdl.paloaltonetworks.com443
    *.api2-lc-prod-za.gpcloudservice.com444
    access.za1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    SpainSource IP Addresses for Log Forwarding34.175.10.160/28N/A
    Firewall Log Ingestionfirewall-prd1.es1.sw1.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-es.gpcloudservice.com3978
    receptor.es1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.es1.sw1.cdl.paloaltonetworks.com443
    *.fei-lc-prod-es.gpcloudservice.com444
    ingest.es1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.es1.sw1.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.es1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.es1.sw1.cdl.paloaltonetworks.com444
    cdl-prd1.es1.sw1.cdl.paloaltonetworks.com443
    *.api2-lc-prod-es.gpcloudservice.com444
    access.es1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    SwitzerlandSource IP Addresses for Log Forwarding34.65.166.64/28N/A
    Firewall Log Ingestionfirewall-prd1.ch1.ew6.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-ch.gpcloudservice.com3978
    receptor.ch1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.ch1.ew6.cdl.paloaltonetworks.com443
    *.fei-lc-prod-ch.gpcloudservice.com444
    ingest.ch1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.ch1.ew6.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.ch1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.ch1.ew6.cdl.paloaltonetworks.com444
    cdl-prd1.ch1.ew6.cdl.paloaltonetworks.com443
    *.api2-lc-prod-ch.gpcloudservice.com444
    access.ch1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    TaiwanSource IP Addresses for Log Forwarding34.81.162.32/28N/A
    Firewall Log Ingestionfirewall-prd1.tw1.ae1.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-tw.gpcloudservice.com3978
    receptor.tw1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.tw1.ae1.cdl.paloaltonetworks.com443
    *.fei-lc-prod-tw.gpcloudservice.com444
    ingest.tw1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.tw1.ae1.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.tw1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.tw1.ae1.cdl.paloaltonetworks.com444
    cdl-prd1.tw1.ae1.cdl.paloaltonetworks.com443
    *.api2-lc-prod-tw.gpcloudservice.com444
    access.tw1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    United KingdomSource IP Addresses for Log Forwarding35.246.51.240/28N/A
    Firewall Log Ingestionfirewall-prd1.uk.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-uk.gpcloudservice.com3978
    receptor.uk1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.uk.cdl.paloaltonetworks.com443
    *.fei-lc-prod-uk.gpcloudservice.com444
    ingest.uk1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.uk.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.uk1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.uk.cdl.paloaltonetworks.com444
    cortex-prd1.uk.cdl.paloaltonetworks.com443
    *.api2-lc-prod-uk.gpcloudservice.com444
    access.uk1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    United StatesSource IP Addresses for Log Forwarding65.154.226.0/24, 34.67.106.64/28N/A
    Firewall Log Ingestionfirewall-prd1.us.cdl.paloaltonetworks.com3978
    firewall-prd1.us2.cent1.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-us.gpcloudservice.com3978
    receptor.us1.prd.strata.logging.paloaltonetworks.com3978
    Enhanced Application Log Ingestionfei-prd1.us.cdl.paloaltonetworks.com443
    *.fei-lc-prod-us.gpcloudservice.com444
    eal-prd1.us2.cent1.cdl.paloaltonetworks.com443
    ingest.us1.prd.strata.logging.paloaltonetworks.com443
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.us.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    api.us1.prd.strata.logging.paloaltonetworks.com443
    Log Access from Panoramapcl-prd1.us.cdl.paloaltonetworks.com444
    cortex-prd1.us.cdl.paloaltonetworks.com443
    *.api2-lc-prod-us.gpcloudservice.com444
    access.us1.prd.strata.logging.paloaltonetworks.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    United States Government (High)Source IP Addresses for Log Forwarding34.132.154.128/28N/A
    Firewall Log Ingestionfirewall-highgov.us1.cent1.highgov.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-highgov.gpcloudservice.com3978
    Enhanced Application Log Ingestionfei-highgov1.us1.cent1.highgov.cdl.paloaltonetworks.com443
    *.fei-lc-prod-highgov.gpcloudservice.com444
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-highgov1.us1.cent1.highgov.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    Log Access from Panoramapcl-highgov1.us1.cent1.highgov.cdl.paloaltonetworks.com444
    cdl-highgov1.us1.cent1.highgov.cdl.paloaltonetworks.com443
    *.api2-lc-prod-highgov.gpcloudservice.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    registry.highgov.cdl.paloaltonetworks.com443
    United States Government (Moderate)Source IP Addresses for Log Forwarding34.67.50.64/28N/A
    Firewall Log Ingestionfirewall-gov.gov.cdl.paloaltonetworks.com3978
    *.in2-lc-prod-gov.gpcloudservice.com3978
    Enhanced Application Log Ingestionfei-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    *.fei-lc-prod-gov.gpcloudservice.com444
    Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    storage.googleapis.com443
    Log Access from Panoramapcl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    *.api2-lc-prod-gov.gpcloudservice.com444
    License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
    cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
    If you plan to use Cortex XDR with Strata Logging Service deployed in the United Kingdom (UK), all Cortex XDR logs and data reside within the UK boundary, but Cortex XDR will send files that require analysis to the WildFire cloud for EU. If your compliance and privacy laws prohibit files from leaving the UK region, disable file uploads to WildFire in your Malware Security Profiles.

    Limitations in Strata Logging Service China

    The following Strata Logging Service features are unavailable or require you to take additional action to work for Strata Logging Service instances deployed in China:
    • Onboarding NGFW devices in Strata Logging Service app is unavailable.
    • Dashboard view in Strata Logging Service app is unavailable.
    • Enabling log forwarding from Strata Logging Service instance deployed in China to an external log server requires you to contact Palo Alto Networks team. Configuring log forwarding profiles to send logs to servers outside China can result in personally identifiable information leaving China.
    • The Strata Cloud Manager app is unavailable to manage and monitor Strata Logging Service China instances, instead use the Strata Logging Service standalone app.

    © 2026 Palo Alto Networks, Inc. All rights reserved.