Skyhigh Cloud Connector 6.7.1 Release Notes (Aug, 2024)

Log Collector: Converged Logging Client with Cloud Connector 

The Logging Client is now integrated into Skyhigh Cloud Connector (on-premise) and is renamed as the Log Collector on the Cloud Connector SIEM Integration (Inline) tab (found under Settings > Infrastructure > Cloud Connector > SIEM Integration (Inline)). The Log Collector functions in the same manner as the Logging Client.

The Log Collector collects Security Service Edge web access data within your network or feeds directly into your reporting and analytics tools. You can use these files to investigate or to perform analysis with Skyhigh SSE. The Log Collector retrieves and stores the logs at configured intervals. You can save the logs to a local directory or send them from Skyhigh CASB to your third-party SIEM systems (Security Information and Event Management) through a Syslog server.

The Log Collector can simultaneously download the data originating from different log types such as Secure Web Gateway (SWG), Remote Browser Isolation (RBI), Private Access, and Cloud Firewall which eliminates running multiple instances to collect different log types. A single Enterprise Cloud Connector accommodates downloading multiple log types at the same time. 

The below table represents the Log Collector user interface when the toggle is switched ON and OFF. By default, the toggle will be turned OFF. For details, see SIEM Integration (Inline).