Certain cloud services, like Cortex XDR™,
do not integrate with the firewall directly, but rely on data stored
in Cortex Data Lake for visibility into network activity. Enhanced
application logging is a feature that comes with a Cortex Data Lake
subscription—it allows the firewall to collect data specifically
for Cortex XDR to use to detect anomalous network activity. Turning
on enhanced application logging is a
Cortex XDR best practice.