XSIAM-ENGINEER: Palo Alto Networks Certified XSIAM Engineer

By Palo Alto Networks · Question Mode

QuestionQ10

VerifiedIntegration and Automation

An engineer needs to onboard data from a third-party vendor's firewall. Because no content pack is available, the engineer creates a custom data-source integration and parsing rules that generate a dataset containing the firewall data.

How can Cortex XSIAM analytics capabilities be applied to this data?

Explanation

Cortex XSIAM automatically runs analytics and creates network stories for network data mapped to the XDM network 5-tuple: source IP, source port, target IP, target port, and IP protocol. A data model rule maps the custom dataset's fields to those XDM fields, enabling those analytics capabilities.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!