Certain cloud services, like Cortex XDR™, do not integrate with the firewall directly, but rely on data stored in Cortex Data Lake for visibility into network activity. Enhanced application logging is a feature that comes with a Cortex Data Lake subscription—it allows the firewall to collect data specifically for Cortex XDR to use to detect anomalous network activity. Turning on enhanced application logging is a Cortex XDR best practice.