Zscaler Web Security Integration with Sumo Logic

Solution Overview

Zscaler and Sumo Logic have partnered to integrate rich web, social and mobile user and security event data to provide actionable, single views across all elements in an environment. Organizations seek to gain a unified view of log data across an increasingly complex and heterogeneous environment to effectively detect and respond to indicators of compromise (IOCs) in their web traffic and identify anomalies and security vulnerabilities. Organizations may also have regulatory compliance requirements around centralized logging and data retention.

Sumo Logic App for Zscaler Web Security

Zscaler Web Security delivers world-class threat protection and policy control over all of your web traffic. The solution sits inline between your company and the Internet, protecting your enterprise from cyberthreats, stopping intellectual property leaks, and ensuring compliance with corporate content and access policies. It monitors your network and user activity, secures roaming users and mobile devices, and manages all of this globally from a single management console. Zscaler’s security capabilities provide defense-in-depth, protecting you from a broad range of threats including malicious URL requests, viruses, Advanced Persistent Threats (APTs), zero-day malware, adware, spyware, botnets, cross-site scripting, and much more.

Benefits of this joint integration include:

• Seamless integration with customers’ existing Sumo Logic deployment.
• Real time, unified visibility of threat detection and prioritization on a single platform across all devices, users and locations.
• Automatically discover useful security information embedded in your data across heterogeneous environments.

Zscaler Nanolog Streaming service (NSS) streams real-time and comprehensive log data to Sumo Logic. The Sumo Logic App for Zscaler gives the security practitioner visibility into security-relevant data captured, correlated and indexed within Sumo Logic.

Sumo Logic App for Zscaler is designed to present a unified view of security across heterogeneous vendor data formats. Administrators can leverage the dashboards and saved searches in Sumo Logic to track security events and address compliance. Sumo Logic App for Zscaler not only enables organizations to visualize user web, mobile, application logs but also correlate logs & events from other data sources.

Moving to the cloud does not require sacrificing visibility or control over your infrastructure and applications. Sumo Logic and Zscaler have partnered to provide modern tools and services designed for the volume, variety and velocity of hybrid cloud-generated data and provide real-time operational and security visibility into your modern application stack.

“Combining Zscaler’s inline deep packet inspection with Sumo Logic’s visibility across our global IT infrastructure, allows us to more quickly respond to security threats and proactively improve our security posture.” VP Security, Global Beverage Company