Strata Logging Service Regions
Focus
Focus
Strata Logging Service

Strata Logging Service Regions

Table of Contents

Strata Logging Service Regions

Learn more about the regions in which you can host Strata Logging Service.
Where Can I Use This?What Do I Need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • Prisma Access (Managed by Panorama)
  • NGFW (Managed by PAN-OS or Panorama)
  • NGFW (Managed by Strata Cloud Manager)
  • Strata Logging Service license
The region that you select when you activate Strata Logging Service determines the physical location in which your data is stored. If regulations require that your data remain within regional bounds, select the appropriate region to comply.
Strata Logging Service ensures data redundancy by storing your data in two different zones in the region you choose. Therefore, in case of an outage, Strata Logging Service will failover to the secondary zone in an attempt to prevent interruption of service.
If you want to use a third-party app to ingest your Strata Logging Service log data, ensure that the third-party app is supported in the same region as your Strata Logging Service instance. Otherwise, the third-party app will be unable to access your data. Third-party apps are currently supported in only the following regions:
  • United States - Americas
  • United Kingdom
  • Netherlands - Europe
  • Japan
These are the regions in which you can host Strata Logging Service. Each region has
  • an address range that you must allow on your syslog or HTTPS server when forwarding logs from Strata Logging Service.
  • FQDNs and ports that you must allow on any third-party firewalls you might have between your Palo Alto Networks firewalls and Strata Logging Service. Only Palo Alto Networks firewalls can generate logs for Strata Logging Service.
Products that use Strata Logging Service may support either all or some of the listed regions. To know which Strata Logging Service regions your product supports, refer to the respective product documentation. For instance, Prisma Access supports only a subset of Strata Logging Service regions.
RegionPurposeFQDN or IP AddressTCP Port
AustraliaSource IP Addresses for Log Forwarding35.244.108.240/28N/A
Firewall Log Ingestionfirewall-prd1.au1.se1.cdl.paloaltonetworks.com3978
*.in2-lc-prod-au.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.au1.se1.cdl.paloaltonetworks.com443
*.fei-lc-prod-au.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.au1.se1.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.au1.se1.cdl.paloaltonetworks.com444
cdl-prd1.au1.se1.cdl.paloaltonetworks.com443
*.api2-lc-prod-au.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
CanadaSource IP Addresses for Log Forwarding34.95.59.80/28N/A
Firewall Log Ingestionfirewall-prd1.ca1.ne1.cdl.paloaltonetworks.com3978
*.in2-lc-prod-ca.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.ca1.ne1.cdl.paloaltonetworks.com443
*.fei-lc-prod-ca.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.ca1.ne1.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.ca1.ne1.cdl.paloaltonetworks.com444
cdl-prd1.ca1.ne1.cdl.paloaltonetworks.com443
*.api2-lc-prod-ca.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
ChinaSource IP Addresses for Log Forwarding54.222.227.10, 54.223.157.221, 52.81.134.154N/A
Firewall Log Ingestionfirewall-prd1.cn1.no1.cdl.prismaaccess.cn3978
*.in2-lc-prod-cn.cdl.prismaaccess.cn3978
Enhanced Application Log Ingestionfei-prd1.cn1.no1.cdl.prismaaccess.cn443
*.fei-lc-prod-cn.cdl.prismaaccess.cn444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.cn1.no1.cdl.prismaaccess.cn443
s3.cn-north-1.amazonaws.com.cn443
Log Access from Panoramapcl-prd1.cn1.no1.cdl.prismaaccess.cn444
cdl-prd1.cn1.no1.cdl.prismaaccess.cn443
*.api2-lc-prod-cn.cdl.prismaaccess.cn444
License and Tenant Mapping Checkregistry-prd1.cn1.no1.cdl.prismaaccess.cn444
FranceSource IP Addresses for Log Forwarding34.155.98.0/28N/A
Firewall Log Ingestionfirewall-prd1.fr1.ew9.cdl.paloaltonetworks.com3978
*.in2-lc-prod-fr.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.fr1.ew9.cdl.paloaltonetworks.com443
*.fei-lc-prod-fr.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.fr1.ew9.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.fr1.ew9.cdl.paloaltonetworks.com444
cdl-prd1.fr1.ew9.cdl.paloaltonetworks.com443
*.api2-lc-prod-fr.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
GermanySource IP Addresses for Log Forwarding35.246.195.240/28N/A
Firewall Log Ingestionfirewall-prd1.de1.ew3.cdl.paloaltonetworks.com3978
*.in2-lc-prod-de.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.de1.ew3.cdl.paloaltonetworks.com443
*.fei-lc-prod-de.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.de1.ew3.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.de1.ew3.cdl.paloaltonetworks.com444
cdl-prd1.de1.ew3.cdl.paloaltonetworks.com443
*.api2-lc-prod-de.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
IndiaSource IP Addresses for Log Forwarding35.244.35.240/28N/A
Firewall Log Ingestionfirewall-prd1.in1.as1.cdl.paloaltonetworks.com3978
*.in2-lc-prod-in.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.in1.as1.cdl.paloaltonetworks.com443
*.fei-lc-prod-in.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.in1.as1.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.in1.as1.cdl.paloaltonetworks.com444
cdl-prd1.in1.as1.cdl.paloaltonetworks.com443
*.api2-lc-prod-in.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
IndonesiaSource IP Addresses for Log Forwarding34.128.96.0/28N/A
Firewall Log Ingestionfirewall-prd1.id1.se2.cdl.paloaltonetworks.com3978
*.in2-lc-prod-id.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.id1.se2.cdl.paloaltonetworks.com443
*.fei-lc-prod-id.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.id1.se2.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.id1.se2.cdl.paloaltonetworks.com444
cdl-prd1.id1.se2.cdl.paloaltonetworks.com443
*.api2-lc-prod-id.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
Israel - Tel AvivSource IP Addresses for Log Forwarding34.165.82.208/28N/A
Firewall Log Ingestionfirewall-prd1.il1.mw1.cdl.paloaltonetworks.com3978
*.in2-lc-prod-il.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.il1.mw1.cdl.paloaltonetworks.com443
*.fei-lc-prod-il.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.il1.mw1.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.il1.mw1.cdl.paloaltonetworks.com444
cdl-prd1.il1.mw1.cdl.paloaltonetworks.com443
*.api2-lc-prod-il.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
ItalySource IP Addresses for Log Forwarding34.154.10.144/28N/A
Firewall Log Ingestionfirewall-prd1.it1.ew8.cdl.paloaltonetworks.com3978
*.in2-lc-prod-it.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.it1.ew8.cdl.paloaltonetworks.com443
*.fei-lc-prod-it.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.it1.ew8.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.it1.ew8.cdl.paloaltonetworks.com444
cdl-prd1.it1.ew8.cdl.paloaltonetworks.com443
*.api2-lc-prod-it.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
Japan - TokyoSource IP Addresses for Log Forwarding34.84.94.80/28N/A
Firewall Log Ingestionfirewall-prd1.jp1.ne1.cdl.paloaltonetworks.com3978
*.in2-lc-prod-jp.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.jp1.ne1.cdl.paloaltonetworks.com443
*.fei-lc-prod-jp.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.jp1.ne1.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.jp1.ne1.cdl.paloaltonetworks.com444
cdl-prd1.jp1.ne1.cdl.paloaltonetworks.com443
*.api2-lc-prod-jp.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
KoreaSource IP Addresses for Log Forwarding34.22.96.0/28N/A
Firewall Log Ingestionfirewall-prd1.kr1.ne3.cdl.paloaltonetworks.com3978
*.in2-lc-prod-kr.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.kr1.ne3.cdl.paloaltonetworks.com443
*.fei-lc-prod-kr.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.kr1.ne3.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.kr1.ne3.cdl.paloaltonetworks.com444
cdl-prd1.kr1.ne3.cdl.paloaltonetworks.com443
*.api2-lc-prod-kr.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
Netherlands - EuropeSource IP Addresses for Log Forwarding154.59.126.0/24, 34.90.138.80/28N/A
Firewall Log Ingestionfirewall-prd1.nl.cdl.paloaltonetworks.com3978
*.in2-lc-prod-eu.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.nl.cdl.paloaltonetworks.com443
*.fei-lc-prod-eu.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.nl.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.nl.cdl.paloaltonetworks.com444
cortex-prd1.nl.cdl.paloaltonetworks.com443
*.api2-lc-prod-eu.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
Poland - WarsawSource IP Addresses for Log Forwarding34.118.66.32/28N/A
Firewall Log Ingestionfirewall-prd1.pl1.ec2.cdl.paloaltonetworks.com3978
*.in2-lc-prod-pl.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.pl1.ec2.cdl.paloaltonetworks.com443
*.fei-lc-prod-pl.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.pl1.ec2.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.pl1.ec2.cdl.paloaltonetworks.com444
cdl-prd1.pl1.ec2.cdl.paloaltonetworks.com443
*.api2-lc-prod-pl.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
QatarSource IP Addresses for Log Forwarding34.18.128.0/28N/A
Firewall Log Ingestionfirewall-prd1.qa1.mc1.cdl.paloaltonetworks.com3978
*.in2-lc-prod-qa.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.qa1.mc1.cdl.paloaltonetworks.com443
*.fei-lc-prod-qa.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.qa1.mc1.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.qa1.mc1.cdl.paloaltonetworks.com444
cdl-prd1.qa1.mc1.cdl.paloaltonetworks.com443
*.api2-lc-prod-qa.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
Saudi ArabiaSource IP Addresses for Log Forwarding34.166.52.80/28N/A
Firewall Log Ingestionfirewall-prd1.sa1.mc2.cdl.paloaltonetworks.com3978
*.in2-lc-prod-sa.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.sa1.mc2.cdl.paloaltonetworks.com443
*.fei-lc-prod-sa.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.sa1.mc2.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.sa1.mc2.cdl.paloaltonetworks.com444
cdl-prd1.sa1.mc2.cdl.paloaltonetworks.com443
*.api2-lc-prod-sa.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
SingaporeSource IP Addresses for Log Forwarding34.87.142.80/28N/A
Firewall Log Ingestionfirewall-prd1.sg1.se1.cdl.paloaltonetworks.com3978
*.in2-lc-prod-sg.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.sg1.se1.cdl.paloaltonetworks.com443
*.fei-lc-prod-sg.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.sg1.se1.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.sg1.se1.cdl.paloaltonetworks.com444
cdl-prd1.sg1.se1.cdl.paloaltonetworks.com443
*.api2-lc-prod-sg.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
SpainSource IP Addresses for Log Forwarding34.175.10.160/28N/A
Firewall Log Ingestionfirewall-prd1.es1.sw1.cdl.paloaltonetworks.com3978
*.in2-lc-prod-es.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.es1.sw1.cdl.paloaltonetworks.com443
*.fei-lc-prod-es.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.es1.sw1.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.es1.sw1.cdl.paloaltonetworks.com444
cdl-prd1.es1.sw1.cdl.paloaltonetworks.com443
*.api2-lc-prod-es.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
SwitzerlandSource IP Addresses for Log Forwarding34.65.166.64/28N/A
Firewall Log Ingestionfirewall-prd1.ch1.ew6.cdl.paloaltonetworks.com3978
*.in2-lc-prod-ch.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.ch1.ew6.cdl.paloaltonetworks.com443
*.fei-lc-prod-ch.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.ch1.ew6.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.ch1.ew6.cdl.paloaltonetworks.com444
cdl-prd1.ch1.ew6.cdl.paloaltonetworks.com443
*.api2-lc-prod-ch.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
TaiwanSource IP Addresses for Log Forwarding34.81.162.32/28N/A
Firewall Log Ingestionfirewall-prd1.tw1.ae1.cdl.paloaltonetworks.com3978
*.in2-lc-prod-tw.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.tw1.ae1.cdl.paloaltonetworks.com443
*.fei-lc-prod-tw.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.tw1.ae1.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.tw1.ae1.cdl.paloaltonetworks.com444
cdl-prd1.tw1.ae1.cdl.paloaltonetworks.com443
*.api2-lc-prod-tw.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
United KingdomSource IP Addresses for Log Forwarding35.246.51.240/28N/A
Firewall Log Ingestionfirewall-prd1.uk.cdl.paloaltonetworks.com3978
*.in2-lc-prod-uk.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.uk.cdl.paloaltonetworks.com443
*.fei-lc-prod-uk.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.uk.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.uk.cdl.paloaltonetworks.com444
cortex-prd1.uk.cdl.paloaltonetworks.com443
*.api2-lc-prod-uk.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
United StatesSource IP Addresses for Log Forwarding65.154.226.0/24, 34.67.106.64/28N/A
Firewall Log Ingestionfirewall-prd1.us.cdl.paloaltonetworks.com3978
firewall-prd1.us2.cent1.cdl.paloaltonetworks.com3978
*.in2-lc-prod-us.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-prd1.us.cdl.paloaltonetworks.com443
*.fei-lc-prod-us.gpcloudservice.com444
eal-prd1.us2.cent1.cdl.paloaltonetworks.com443
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-prd1.us.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-prd1.us.cdl.paloaltonetworks.com444
cortex-prd1.us.cdl.paloaltonetworks.com443
*.api2-lc-prod-us.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
United States Government (High)Source IP Addresses for Log Forwarding34.132.154.128/28N/A
Firewall Log Ingestionfirewall-highgov.us1.cent1.highgov.cdl.paloaltonetworks.com3978
*.in2-lc-prod-highgov.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-highgov1.us1.cent1.highgov.cdl.paloaltonetworks.com443
*.fei-lc-prod-highgov.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-highgov1.us1.cent1.highgov.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-highgov1.us1.cent1.highgov.cdl.paloaltonetworks.com444
cdl-highgov1.us1.cent1.highgov.cdl.paloaltonetworks.com443
*.api2-lc-prod-highgov.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
registry.highgov.cdl.paloaltonetworks.com443
United States Government (Moderate)Source IP Addresses for Log Forwarding34.67.50.64/28N/A
Firewall Log Ingestionfirewall-gov.gov.cdl.paloaltonetworks.com3978
*.in2-lc-prod-gov.gpcloudservice.com3978
Enhanced Application Log Ingestionfei-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
*.fei-lc-prod-gov.gpcloudservice.com444
Telemetry and GlobalProtect Troubleshooting Log Ingestionbr-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
storage.googleapis.com443
Log Access from Panoramapcl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
*.api2-lc-prod-gov.gpcloudservice.com444
License and Tenant Mapping Checklic.lc.prod.us.cs.paloaltonetworks.com444
cdl-gov1.us1.cent1.gov.cdl.paloaltonetworks.com443
If you plan to use Cortex XDR with Strata Logging Service deployed in the United Kingdom (UK), all Cortex XDR logs and data reside within the UK boundary, but Cortex XDR will send files that require analysis to the WildFire cloud for EU. If your compliance and privacy laws prohibit files from leaving the UK region, disable file uploads to WildFire in your Malware Security Profiles.