Skip to main content

SIEM Integration and Security Event Export

Zero Trust access decisions are more useful when security teams can investigate them alongside the rest of the environment.

ZTXGate maintains searchable records for access, authentication, and policy activity and can forward relevant events to external monitoring and SIEM systems.

Supported Event Formats​

ZTXGate supports event export using:

  • RFC 5424 syslog
  • ArcSight CEF
  • JSON

Supported transport options include UDP, TCP, and TCP with TLS according to the integration.

Connect Access Events to Security Operations​

Forwarded events can help security teams correlate ZTXGate activity with endpoint, identity, infrastructure, and application events already collected by the organization's monitoring stack.

Typical operational uses include:

  • access investigations
  • authentication review
  • policy troubleshooting
  • security monitoring
  • audit evidence collection
  • correlation with identity and endpoint events

Keep Local Searchable Audit Records​

SIEM export complements rather than replaces ZTXGate's own searchable audit records.

Administrators can review access, authentication, and policy activity directly in ZTXGate while also sending relevant events to the organization's central monitoring platform.

Works with Connected or Isolated Monitoring Designs​

ZTXGate itself does not require a cloud-hosted SIEM. If an organization operates an internal SIEM or logging platform inside an isolated network, events can be forwarded there using the supported formats and transports available in that environment.

A cloud-hosted SIEM naturally requires connectivity and is therefore an external dependency in a fully air-gapped architecture.

Part of a Broader Zero Trust Signal Flow​

SIEM is primarily a visibility and investigation destination. Access policy can also draw on identity, device posture, approval, and authentication signals, including Microsoft Intune, Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, and Jamf.

Explore all integrations · Security & Trust · ZTXGate · Start Free Trial