SaaS Security
Connect SaaS Security Inline and Strata Logging Service
Table of Contents
Connect SaaS Security Inline and Strata Logging Service
Connect SaaS Security Inline to Strata Logging Service to retrieve firewall
logs.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
Or any of the following licenses that include the SaaS Security Inline license:
|
You already connected SaaS Security Inline with Strata Logging Service as part of
your SaaS Security Inline activation for NGFW, VM-Series, or Prisma Access. However, if you need to
update SaaS Security Inline with a new Strata Logging Service after
activation, contact Palo Alto Networks customer support.
When your Strata Logging Service is configured to receive logs from your Palo Alto Networks
NGFW , after activation, SaaS Security Inline discovers all
SaaS apps and users.
SaaS Security Inline discovers users by using Strata Logging Service logs,
specifically the source_user_info field. If the firewall
forwards a log to Strata Logging Service and this field is not populated
for a given user, SaaS Security Inline considers that user unknown. SaaS Security excludes all app usage data for unknown users.
- If you created this connection in advance or at the time of SaaS Security Inline activation for NGFW, VM-Series, or Prisma Access, the connection status indicates Monitoring.
- If the connection message indicates Not Connected, contact Palo Alto Networks customer support to manually add the Strata Logging Service serial number.
- If the connection status indicates Error with Connection Unsuccessful message, contact Palo Alto Networks customer support to update the Strata Logging Service serial number.
- Log in to Strata Cloud Manager.Select .Verify that the status for the serial number indicates Monitoring.
![]()
