SIEM / SOAR Integration

Avanan allows you to integrate with multiple Security Information and Event Management (SIEM) platforms and Cortex XSOAR by Palo Alto Networks.

Encryption - For SIEM, unless configured otherwise, all events are forwarded over HTTPS.

Sending events on malicious activity to any supported SIEM platform is included in all Avanan packages.

Note:

Sending clean events to a SIEM platform has an additional cost and requires an additional license. To purchase the license, contact Avanan Sales or Avanan Support.

Source IP Address

Avanan can be deployed in one of several geographic regions. The security events get forwarded from a unique static IP for each region.

The static IP address for different regions:

  • Australia - 52.63.125.59

  • Canada - 35.182.23.24

  • Europe - 54.247.106.52

  • India * - 15.207.123.24

  • United Arab Emirates * - 51.112.39.93

  • United Kingdom * - 3.9.211.100

  • United States - 34.192.247.192

* These regions are relevant only for tenants created using the Avanan MSP portal.