Deployment with Audit Logging Flow to External SIEM

The architecture also supports forwarding logs from protectors to the External SIEM.

The logging flow from protectors to the ESA and the External SIEM is shown in the image below.

ESA v10 with Protectors with logging flow to External SIEM


Legends

ComponentActive FlowFailover Flow
Policy download for v9.1.0.0 Protector______- - - - - -
Package download for v10.0.0 Standard Protector______- - - - - -
Forwarding of Audit Events to External SIEM via ESA______- - - - - -

Last modified : July 30, 2025