Explains how Security Analytics and Logging captures Firewall Threat Defense events from Cloud-Delivered Firewall Management Center-managed devices and makes them available for filtering and review in Security Cloud Control.
SAL (SaaS) is a cloud-based security service that
-
captures connection, intrusion, file, malware, and Security Intelligence events from all Firewall Threat Defense devices
-
stores events in the Cisco cloud for centralized viewing in Security Cloud Control, and
-
provides filtering and review capabilities through the Event Logging page to help understand what security rules are triggering in your network.