SOLUTION BRIEF

Modern Security Ops withZscaler and Sumo Logic
With enterprises embracing cloud resources and SaaS services, the attack surface has grown. This becomes even more challenging
as employees are working from everywhere. Users go directly to the internet, bypassing traditional security controls found in the datacenter. A new approach is needed to provide security and visibility for the enterprise.

Solution Overview
Zscaler provides security and policy enforcement through theZero Trust Exchange while Sumo Logic provides analytics andvisibility. Both services are delivered 100% in the cloud.
Zscaler and Sumo Logic have partnered to integrate rich web,social and mobile user and security event data to provide
actionable, single views across all elements in an environment.
Organizations seek to gain a unified view of log data acrossan increasingly complex and heterogeneous environment toeffectively detect and respond to indicators of compromise(IOCs) in their web traffic and identify anomalies and security
vulnerabilities. Organizations may also have regulatory compliancerequirements around centralized logging and data retention.

Sumo Logic App for Zscaler Internet Access
Zscaler Internet Access (ZIA) delivers world-class threatprotection and policy control over all of your web traffic. The
solution sits inline between your company and the Internet,
protecting your enterprise from cyberthreats, stopping intellectual
property leaks, and ensuring compliance with corporate content
and access policies. It monitors your network and user activity,
secures roaming users and mobile devices, and manages all of
this globally from a single management console. Zscaler’s security
capabilities provide defense-in-depth, protecting you from a
broad range of threats including malicious URL requests, viruses,Advanced Persistent Threats, zero-day malware, adware, spyware,botnets, cross-site scripting, and more.

Sumo Logic App for Zscaler Private Access
The Zscaler Private Access App collects logs from Zscaler using
the Log Streaming Service (LSS) to populate pre-configured
searches and dashboards. The dashboards provide easy-toaccess visual insights into user behavior, security, connector
status, and risk. Security teams can use the findings from the app

to monitor and alert on the status and availability of Zero Trust
Network Access deployments for apps running in the private
cloud and datacenter. Monitor ZPA health and keep your ZPA
infrastructure operating smoothly by keeping a close eye on
connector health and performance. Easily visualize all the changes
that have occurred on the ZPA infrastructure to assure compliancewith policy and identify suspicious activity.

Sumo Logic Cloud SOAR integration withZScaler security gateway for secure access tothe InternetOrchestrate ZScaler technology inside your ongoing processes
and automate threat response using Cloud SOAR. Playbooks
highlight appropriate courses of action, reducing the time needed
to remediate incidents and can be easily modified by adjusting
tools in relation to processes. For example, when a user tries toview a particular website and Cloud SOAR receives input thatgenerates an incident, you can activate a playbook to collectcategories present on ZScaler. Once the playbook obtains thenecessary information, if a category is allowed, it checks thewhitelist from ZScaler and creates a User Choice. The User Choiceinvites the SOC Analyst to perform the action they consider to be
the most appropriate. If the category is not allowed, the playbook
gets the ZScaler blacklist.

SOLUTION BRIEF | Modern Security Ops with Zscaler and Sumo Logic

Benefits of this joint integration include:• Seamless integration with customers’ existing Sumo Logicdeployment.
• Real time, unified visibility of threat detection and prioritization ona single platform across all devices, users and locations.
• Automatically discover useful security information embedded inyour data across heterogeneous environments.

Moving to the cloud does not require sacrificing visibility or control
over your infrastructure and applications. Sumo Logic and Zscaler
have partnered to provide modern tools and services designed forthe volume, variety and velocity of hybrid cloud-generated dataand provide real-time operational and security visibility into yourmodern application stack.

ZIA Cloud NSS streams real-time and comprehensive log data toSumo Logic. The Sumo Logic App for Zscaler gives the security
practitioner visibility into security-relevant data captured,correlated and indexed within Sumo Logic.

Zscaler
Zscaler (NASDAQ: ZS) accelerates digital transformation so that
customers can be more agile, efficient, resilient, and secure. TheZscaler Zero Trust Exchange protects thousands of customers
from cyberattacks and data loss by securely connecting users,devices, and applications in any location. Distributed acrossmore than 150 data centers globally, the SASE-based Zero Trust
Exchange is the world’s largest inline cloud security platform.
Learn more at zscaler.com or follow us on Twitter @zscaler.

Sumo Logic

Full Security Stack Integration with Sumo Logic
Sumo Logic App for Zscaler is designed to present a unified
view of security across heterogeneous vendor data formats.
Administrators can leverage the dashboards and saved searches
in Sumo Logic to track security events and address compliance.
Sumo Logic App for Zscaler not only enables organizations tovisualize user web, mobile, application logs but also correlate logs
& events from other data sources.

Sumo Logic, Inc. (NASDAQ: SUMO) empowers the people who
power modern, digital business. Through its SaaS analytics
platform, Sumo Logic enables customers to deliver reliable andsecure cloud-native applications. The Sumo Logic ContinuousIntelligence Platform™ helps practitioners and developers
ensure application reliability, secure and protect against modern
security threats, and gain insights into their cloud infrastructures.
Customers around the world rely on Sumo Logic to get powerfulreal-time analytics and insights across observability and security
solutions for their cloud-native applications. For more information,
visit www.sumologic.com.

Toll-Free: 1.855.LOG.SUMO | Int’l: 1.650.810.8700©️ Copyright 2022 Sumo Logic, Inc. Sumo Logic is a trademark or registered trademark of305 Main Street, Redwood City, CA 94603

Sumo Logic in the United States and in foreign countries. All other company and productnames may be trademarks or registered trademarks of their respective owners.

www.sumologic.com

Updated 07/2022