Forwarding log messages to the Modular Sensor

You can configure devices (for example, firewall) in your environment to forward log messages (for example, syslog) to the Modular Sensor so that

CylanceMDR

analysts can track suspicious activity.

You need to forward log messages from your device (for example, firewall) to the Modular Sensor from a specific port so that the Modular Sensor receives the messages successfully. Follow the instructions from your vendor to set up your device to forward the logs messages. For the list of ports that you need to open in your environment, see Supported third-party log sources for telemetry data ingestion.