Cloud Networking

Cloud networking integrations cover the services that sit between users and the internet without living on the corporate network — SASE and SD-WAN fabrics, cloud-delivered DNS and secure web gateways. Their telemetry is the modern replacement for the perimeter firewall log: which sites and applications users reached, from which locations and devices, and what the service blocked. Because these platforms are multi-tenant cloud services, data is retrieved through the vendor's API or delivered to cloud storage rather than sent as syslog from an appliance.

In this section

• Cisco Umbrella — DNS and proxy logs delivered through an S3 bucket intermediary.
• Cloudflare — the account audit log and the GraphQL Analytics API, polled with an account-scoped API token.
• Zscaler — web and firewall logs from the Zscaler cloud, delivered to cloud storage.

Related

• Integrations catalog — all integration categories.
• Integration Matrix — which ingress method each product supports.
• AWS S3 (with SQS) — the bucket-and-notification pattern several of these services use.
• Data Collection — the transports behind these integrations.