FortiGate with on-premise FortiAnalyzer
SOCaaS supports the following topology:
-
FortiGate sends logs to an on-premise FortiAnalyzer
-
FortiAnalyzer forwards logs to SOCaaS
Logs are stored on the on-premise FortiAnalyzer.