Palo Alto Firewall

[KalanaChandrasiri]

Hi People,

I need to know which log format will support withFortiSIEM on Palo Alto ?

Is it CEF or LEF or do we need to configure custom format there ?


Regards,
Kalana

------------------------------
kalana
------------------------------

[rmock_FTNT · Accepted solution]

It would be CEF. There is more information on the CEF mapping located at https://help.fortinet.com/fsiem/5-2-5/Online-Help/HTML5_Help/Appendix_FSM-CEF-mapping.htm?Highlight=....

For the FortiSIEM and PAN configuration, it is located at https://help.fortinet.com/fsiem/5-2-5_ESCG_HTML/FortiSIEM/User-guide/Palo-Alto-Firewall-Configuratio....