palo alto sizing calculator palo alto sizing calculator

Logging HA or Log Redundancy: The ability to retain firewall logs upon the loss of a Panorama device (M-series only). SSLVPN users? This section will cover the information needed to properly size and deploy Panorama logging infrastructure to support customer requirements. Press J to jump to the feed. As you saw above, the firewall is capable of 27 Gbps of throughput but when all the features are enabled, only 3 Gbps are supported. For existing customers, we can leverage data gathered from their existing firewalls and log collectors: There are several factors that drive log storage requirements. I want to receive news and product emails. Thank you! The other piece of the Panorama High Availability solution is providing availability of logs in the event of a hardware failure. Greater ingestion capacity is required for a specific firewall than can be provided by a single log collector (to scale ingestion). Working with Palo Alto Networks customers who have deployed SASE, Forrester identified and quantified a number of key benefits of investing in Palo Alto Networks Prisma SASE solution, including: . If no information is available, use the Device Log Forwarding table above as reference point. $ 2,000 Deposit. The latency of intervening network segments affects the control traffic between the HA members. Gartner is a registered trademark and service mark of Gartner, Inc. and/or its affiliates, and is used herein with permission. Section 0 defines a single dwelling unit as <spanstyle="font-style: italic;"="">"a dwelling unit consisting of a detached house, one unit of row housing, or one unit of a semi-detached . Sometimes, it is not practical to directly measure or estimate what the log rate will be. Version. it's for a PA 5060 with multiple Vsys and 1 etherchannel to the external network and another one for internal servers. IPS, antivirus, and anti-spyware features enabled, utilizing 64K Simply select the products you are using and fill out the details (number of users or retention period for example). limit your VM-Series session capacities in Azure. Palo Alto Networks Logging Service exists as a cloud-based storage mechanism for logs generated by the security platform. Company size 10,001+ employees Headquarters SANTA CLARA, California Type Public Company Founded 2005 Specialties . Give Firewalls.com a call at 866-957-2975 to see for yourself why 5-star reviews, repeat customers, and industry recommendations keep pouring in. In this case, 'Log Delay' is the undesired result of high latency - logs don't show up in the UI until well after they are sent to Panorama. 1. When planning a log collection infrastructure, there are three main considerations that dictate how much storage needs to be provided. User-ID technology features enabled, utilizing 64 KB HTTP transactions. I'm a consulting engineer and frequently work on Palo projects (greenfield, migrations, existing installs). I have a customer with one of their mid-range boxes, rated for 72Gbps, divide that by 10 if you actually use it like a firewall, and again by 5 if you turn everything on. The button appears next to the replies on topics youve started. Prisma Cloud Enterprise Edition is a SaaS-delivered Cloud Native Security Platform with the industry's broadest security and compliance coverage across IaaS, PaaS, hosts, containers, and serverless functionsthroughout the development lifecycle (build-deploy-run), and across multiple public and hybrid . The above numbers are all maximum values. on to calculate the maximum number of logs that can be forwarded to Panorama in the customer environment. In addition to collecting logs from deployed firewalls, reports can be generated based on that log data whether it resides locally to the Panorama (e.g single M-series or VM appliance) for on a distributed logging infrastructure. Application tier spoke VCN. You also want to consider if you are doing site to site or mobile VPN with your firewall solution. The Palo Alto Networks PA-400 Series Series Next-Generation Firewalls, comprising the PA410, PA-415, PA-440, PA-445, PA-450, and PA-460, brings ML-Powered NGFW capabilities to distributed enterprise branch offices, retail locations, and midsize businesses. Sold by Palo Alto Networks Starting from $1.06/hr or from $2,460.00/yr (up to 74% savings) for software + AWS usage fees The VM-Series Next Generation Firewall (NGFW) gives security teams complete visibility and control over all networks using powerful traffic identification, malware prevention, and threat intelligence technologies. For more information on the Prisma Cloud Editions, please read thePrisma Cloud Editions Guide. The calculator DOES NOT take into effect any curvature effects of a tire when placed on a rim it is not designed for. The Panorama solution is comprised of two overall functions: Device Management and Log Collection/Reporting. Retention Period: Number of days that logs need to be kept. PA-220. Palo Alto Networks | 873,397 followers on LinkedIn. Our SE, on the other hand, built a sizing tool to pull in data (either straight numbers from another firewall, or import a csv report with certain criteria from a palo device) to size and can include potential added load from decrypt. Discuss SSL decryption and TLS 1.3 and if that will still be relevant in like 5 years or if that topic will move to the clients (plus . Math Formulas SOLVE NOW . This platform has the highest log ingestion rate, even when in mixed mode. While all current Panorama platforms have an upper limit of 1000 devices for management purposes (5000 firewalls using a single or M-600 since PAN-OS 9.0), it is important for Panorama sizing to understand what the incoming log rate will be from all managed devices. Collect, transform and integrate your enterprise's security data to enable Palo Alto Networks solutions. On average, 1TB of storage on the Logging Service will provide 30 days retention for 5000 users. There are two methods to buffer logs. NGFW (Firewall, IPS, Application Control) 3.5 Gbps. This numbermay change as new features and log fields are introduced. We also included a Logging Service Calculator. Create an account to follow your favorite communities and start taking part in conversations. Palo Alto Networks Device Framework. There are three different cases for sizing log collection using the Logging Service. That's not enough information to make and informed purchase. Ho do you size your firewall ? When purchasing Palo Alto Networks devices or services, log storage is an important consideration. Most sites I visit have an appropriately sized deployment, IMO. Conversely, you can have a smaller throughput comprised of thousands of UDP DNS queries that each generate a separate traffic log. Information on how to determine the optimal MTU for your organization's tunnels. Threat Prevention throughput is measured with App-ID, User-ID, Clean, and Painted, 1 BR/1 BA, Downstairs Unit. Radically simplify security operations by collecting, transforming and integrating your enterprises security data. From the CLI run the command. Verify Remote Connection BGP Status. Additionally, refer to the product comparison tool for detailed information about Palo Alto Networks firewalls by between subnets or application tiers inside a VNET. Note that some companies have maximum retention policies as well. After you have real data, you can resize the VM sizelower or higher as needed using the Azure Portal. The first method is to configure separate log collector groups for each log collector: In this situation, if Log Collector 1 goes down, Firewall A & Firewall B will each store their logs on their own local log partition until the collector is brought back up. Copyright 2023 Palo Alto Networks. The hub VCN is a centralized network where Palo Alto Networks VM-Series firewalls are deployed. So they give us the number of users only. Mobile Network Infrastructure Resolution (view in My Videos) In this video, we demonstrate a couple of different types of users and their effect on connection counts, in a better effort to understand how to right size a . For example: that a certain number of days worth of logs be maintained on the original management platform. Palo Alto Networks Logging Service exists as a cloud-based storage mechanism for logs generated by the security platform. Panorama high availability is Active/Passive only and both appliances need to be fully licensed. Unique among city organizations, the City of Palo Alto operates a full-array of services including its own gas, electric, water, sewer, refuse and storm drainage provided at very competitive rates for its customers. Learn about https://trex-tgn.cisco.com and torture the testgear. This allows log forwarding to be confined to the higher speed LAN segment while allowing Panorama to query the log collector when needed. The equation to determine the storage requirements for particular log type is: Example: Customer wants to be able to keep 30 days worth of traffic logs with a log rate of 1500 logs per second: The result of the above calculation accounts for detailed logs only. (24 I beleive) to check the mode you are in, from a SSH sesion run the following command. This accounts for all logs types at the default quota settings. To calculate the total storage required, devide this number by .60: Default log quotas for Panorama 8.0 and later are as follows: The attached worksheet will take into account the default quota on Panorama and provide a total amount of storage required. These factors are: Each of these factors are discussed in the sections below: The aggregate log forwarding rate for managed devices needs to be understood in order to avoid a design where more logs are regularly being sent to Panorama than it can receive, process, and write to disk. A cloud-delivered architecture connects all users to all applications, whether theyre at headquarters, branch offices or on the road. A PA-220 for example, is rated for 560Mbps, but at home I can run well over 1Gbps through it with every feature turned on (SSL decrypt only on some traffic). View Disk space allocated to logs. Azures networking provides user-defined route (UDR) tables to force traffic through the firewall. To start off, we should establish what a dwelling unit is. SSL Inspection Throughput. The HA sync process occurs on Panorama when a change is made to the configuration on one of the members in the HA pair. After submitting your request, a representative will respond to you within 24 hours. For example, a 1Gbps symmetrical circuit is commonly 1Gbps download and 1Gbps upload. On spreadsheet the throughput value ( without ThreatP ) = 20 Gbs. Fan-less design. Collector 2 will buffer logs that are to be stored on Collector 1 until it can pull Collector 1 out of the rotation. Rule 8-200 of the 2012 CE Code covers load calculations used to determine the minimum feeder or service size for single dwelling units. All rights reserved. have an average size of 1500 bytes when stored in the logging service. Initial factors include: This platform operates as a virtual M-100 and shares the same log ingestion rate. The application tier spoke VCN contains a private subnet to host . Palo Alto Networks Traps endpoint protection and response and Cortex XDR: Palo Alto Networks Traps Advanced Endpoint Protection running version 5.0+ with Traps management service. Review the licensing options article to help guide your selection. network topology, that is, whether connecting on-premises hardware This means that in the event that the firewall's primary log collector becomes unavailable, the logs will be buffered and sent when the collector comes back online. Our new credit-based licensing enables on-demand consumption of software NGFWs and cloud-delivered security services without fixed firewall sizes or rigid service bundles. Overall Log ingestion rate will be reduced by up to 50%. Some of our client doesnt know their current throughput. The minimum requirements for a Panorama virtual appliance running 8.1, 9.0 and 9.1is 16vCPUs and 32GB vRAM. This is in stark contrast to their closest competitor. VM-Series logs are stored on the OS disk VHD in the Azure storage account used at time of deployment; swap disk is not used by VM-Series. Tunnels? When purchasing Palo Alto Networks devices or services, log storage is an important consideration. For cloud-delivered next-generation firewall service, click here. IPS 5 Gbps. From a design perspective, there are two factors to consider when deploying a pair of Panorama appliances in a High Availability configuration. For a 1,500 sq ft home, you would need about 45,000 BTU heat pump. Logging calculator palo alto networks - Logging calculator palo alto networks can be found online or in mathematical textbooks. Here's the calculation: Mini-Split Heat Pump Size (1,500 sq ft) = 1,500 sq ft * 30 BTU per sq ft = 45,000 BTU. . MX device utilization calculation The device utilization data reported to the Meraki dashboard is based on a load average measured over a period of one minute. You will find useful tips for planning and helpful links for examples. SNMP OID Interface Throughput per Interface. The log sizingmethodologyfor firewalls logging to the Logging Service is the same when sizing for on premise log collectors. This is a good option for customers who need to guarantee log availability at all times. A PA-220 for example, is rated for 560Mbps, but at home I can run well over 1Gbps through it with every feature turned on (SSL decrypt only on some traffic). SSD Size : 240 GB . 1U : 1U . This number accounts for both the logs themselves as well as the associated indices. 1U : Appliance Configurations Base Plus Max Base Plus Max Base Plus Max Base Plus Max Base Plus Max Firewalling 27 Gbps. There are other governmental and industry standards that may need to be considered. About. But a common mistake is not calculating traffic in all directions. The FortiGate entry-level/branch F series appliances start at around $600.. Usually you'll be able to get a better idea after 20 minutes of question/response. 1492 Non-VPN traffic MTU Size- 73 IPSec Overhead1419 Definive MTU Size. The changes are based on direct customer feedback enabling users to navigate based on intents: Product Configuration, Administrative Tasks, Education and Certification, and Resolve an Issue, Sizing Storage Using the Logging Service Calculator, Copyright 2007 - 2023 - Palo Alto Networks, Enterprise Data Loss Prevention Discussions, Prisma Access for MSPs and Distributed Enterprises Discussions, Prisma Access Cloud Management Discussions, Prisma Access for MSPs and Distributed Enterprises, Prisma "cloud code security" (CCS) module, NEW: Cortex XSIAM Resources on LIVEcommunity, How to Use Cortex XDR to Monitor Cryptojacking Malware, Choosing the Right Metadata for Phishing and Email Incidents, DOTW: TCP Resets from Client and Server aka TCP-RST-FROM-Client, Cortex XSOAR: Archiving Hosted Data for XSOAR 6, TLP Update (2.0), Going Softer on AMBER and Adding AMBER+STRICT. Most will allow you to demo the firewall in your environment once you start working with them. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type. To check the log rate of a single firewall, download the attached file named ", If the customer has a log collector (or log collectors), download the attached file named ". Palo Alto Networks Live Community presents information about sizing log storage using our Logging Service. Detail and summary logs each have their own quota, regardless of type (traffic/threat): The last design consideration for logging infrastructure is location of the firewalls relative to the Panorama platform they are logging to. The free version is good but you need to pay for the steps to be shown in the premium version. If you've already registered, sign in. Ensure that all of these requirements are addressed with the customer when designing a log storage solution. For example: Device management may be performed from a VM Panorama, while the firewalls forward their logs to colocated dedicated log collectors: In the example above, device management function and reporting are performed on a VM Panorama appliance. Additionally, some companies have internal requirements. This platform has dedicated hardware and can handle up to concurrent 15 administrators. Most throughput is raw number on the sheets. Most of these requirements are regulatory in nature. Choose the filters below to compare our next-generation firewalls, including physical appliances and virtualized firewalls. Device Management HA: The ability to retain device management capabilities upon the loss of a Panorama device (either an M-series or virtual appliance). Because the heartbeat is used to determine reachability of the HA peer, the Heartbeat interval should be set higher than the latency of the link between the HA members. Threat Protection (Firewall, IPS, Application Control, URL filtering, Malware Protection) 3 Gbps. To meet the growing need for inline security across diverse cloud and virtualization use cases, you can deploy the VM-Series firewall on a wide range of private and public cloud computing environments such as VMware, Cisco ACI and ENCS, KVM, OpenStack, Amazon Web Services, Microsoft public and private . Powers Palo Alto Networks offerings Facilitate AI and machine learning with access to rich data at cloud native scale. 3. This allows for zone based policies north-south, i.e. New sessions per second are measured with 1 byte HTTP transactions. To start with, take an inventory of the total firewall appliances that will be managed by Panorama. Storage for Detailed Logs: The amount of storage (in Gigabytes) required to meet the retention period for detailed logs. VPN Gateway in another VNet; or VM-Series to VM-Series between regions. Palo is great to work with - your rep can get you in touch with a vendor that's local to you who will walk you through the sizing process. Use the data sheets, product comparison tool and documentation for selecting the model.Azure Virtual Machine size choicePerformance of VM-Series is dependent on capabilities of the Azure Virtual Machine types. Share. These are: With PAN-OS 8.0, all firewall logs (including Traffic, Threat, Url, etc.) These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole! Dedicated Panoramas running in log collector mode to collect and manage logs from managed devices. Internet connection speed? Things to consider: 1. Created with Lunacy. The following table provides an idea of what you can expect at different latency measurements with redundancy enabled and disabled. Resolution. In live deployments, the actual log rate is generally some fraction of the supported maximum. As /u/datadilemma and /u/Robe_ mentioned, you need a better understanding of the type of traffic you'll be handling and the features you'll be using on that traffic. According to a study done by IBM Security and the Ponemon Institute, the average cost of a data breach (from a sample of 500 companies interviewed) is $3.86 million. If you want to properly compare Fortinet firewalls, hop on a phone call with a vendor you trust! Could you please explain how the thoughput is calculated ? Palo Alto, known as the "Birthplace of Silicon Valley," is home to 69,700 residents and nearly 100,000 jobs. Perform Initial Configuration of the Panorama Virtual Appliance. Currently, the How to Design and Size Panorama Log Collector Environments. Use a combination of Azure monitoring toolsand PAN-OS dashboard to monitor the real-world performance of the firewall. In order to calculate manually i have to add all receive or transmit interfaces traffic ? The General Electrical Load Requirements are based on the inside square feet area of the home which is then used to calculate the basic lighting load and required appliance circuits. Built for security operations Log Ingestion Requirements: This is the total number of logs that will be sent per second to the Panorama infrastructure. Something went wrong while submitting the form. All Rights Reserved. If a larger VM size is used for the VM-Series, only the max CPU cores and memory shown in the table will be fully utilized, but it can take advantage of the faster network performance provided by Azure.VM-Series for Azure supports the following types of StandardAzure Virtual Machine types. When this happens, the attached tools will be updated to reflect the current status. In this guide, learn more about the Prisma Cloud Enterprise Editions pricing module and see examples of pricing and usage models. The most common place to start when sizing a next-gen firewall is by looking at the total Layer 4 throughput. Remote Network Locations with Overlapping Subnets. The PA-200 manages network traffic flows . Now, you can purchase Software NGFW Credits and allocate them as needed to software firewalls, cloud-delivered security services and virtual Panorama - all managed from the Customer Support Portal. > show system info. IPsec VPN performance is tested between two VM-Series in The numbers in parenthesis next to VM denote the number of CPUs and Gigabytes of RAM assigned to the VM. Click Accept as Solution to acknowledge that the answer to your question has been provided. To set up the new MTU value, you can go under Network | Interfaces, select the WAN interface from which the VPN traffic is going through and: Navigate to Advanced t ab. To use, download the file named ". Customers may need to meet compliance requirements for HIPAA, PCI, or Sarbanes-Oxely: There are other governmental and industry standards that may need to be considered. Greater log retention is required for a specific firewall (or set of firewalls) than can be provided by a single log collector (to scale retention). FORTINET NAMED A LEADER IN THE 2022 GARTNER MAGIC QUADRANT FOR NETWORK FIREWALLS. This article contains a brief overview of the Panorama solution, which is comprised of two overall functions: Device Management and Log Collection/Reporting. The calculator will display the recommended storage size for you based on the products you selected and the details you've specified: You must be a registered user to add a comment. Log Collection for Palo Alto Next Generation Firewalls. Be sure to include both business and non-business days as there is usually a large variance in log rate between the two.. Use data from evaluation devices. The log ingestion rate on Panorama is influenced by the platform and mode in use (mixed mode verses logger mode). In February, Palo Alto Networks introduced Software NGFW Credits as a new, more flexible way for our customers to procure VM-Series and CN-Series NGFWs. Palo Alto Networks is introducing the industry's most flexible way to adopt software NGFWs and security services while also maximizing your ROI on security investments. Log Collection for GlobalProtect Cloud Service Remote Office. The design considerations are covered below.Note:As of PANOS 8.1, not only can anyplatform can be configured asa dedicated manager, but also a dedicated log collector. plan your Cortex Data Lake deployment: On your firewalls and Panorama appliances, allow access to the, Ensure that you are not decrypting traffic to, Consider that a Panorama appliance Number of concurrent administrators need to be supported? Preference list 2 will have the remainder of the firewalls and list collector 2 as the primary and collector 1 as the secondary. What features do you want to use on the firewall, for example SSL decryption or IPSec tunneling? Effortlessly run advanced AI and machine learning with cloud-scale data and compute. Palo Alto Networks PA-220 PA-220 500 Mbps firewall throughput (App-ID enabled) 150 Mbps threat prevention throughput 100 Mbps IPSec VPN throughput 64,000 max sessions 4,200 new sessions per second 1000 IPSec VPN tunnels/tunnel interfaces 3 virtual routers 15 security zones 500 max number of policies Will the device handle log collection as well? Please reference the following techdoc Admin GuideSetup The Panorama Virtual Appliance as a Log Collectorfor further details. Cloud Integration. This includes both logs sent to Panorama and the acknowledgement from Panorama to the firewall. Which products will you be using? The combination of Cortex Data Lake and Panorama management delivers an economical, cloud-based logging solution for Palo Alto Networks Next-Generation Firewalls. Insightful Right-Sizing Eliminate the guesswork when sizing hyperconverged infrastructure (HCI) projects with a proven methodology that produces precise solution planning recommendations encompassing both Nutanix software and cluster node hardware. The additional dataplane interfaces are used to connect to multiple networks such as Internet facing, untrust, DMZ, trust, web front end, application layer and database. Easy-to-implement centralized management system for network-wide traffic insight. Latency matters: Network latency between collectors in a log collector group is an important factor in performance. My VAR is great, but their "palo guy" doesn't even know as much as I do because he's not on it daily. Group A, contains two log collectors and receives logs from three standalone firewalls. When using this method, get a log count from the third party solution for a full day and divide by 86,400 (number of seconds in a day). Created with Lunacy. By continuing to browse this site, you acknowledge the use of cookies. When sizing your VM for VM-Series on Azure, there are many factors to consider including your projected throughput (VM-Series model), the deployment type (e.g., VNET to VNET, hybrid cloud using IPSec or Internet facing) and number of network interfaces (NIC). communication on PAN-OS 10.0 and later versions: Use proxy to send logs to Cortex Data Palo Alto Networks PA-200. It was a nice, larger . If the device is separated from Panorama by a low speed network segment (e.g. Feb 07, 2023 at 11:00 AM. Most of these requirements are regulatory in nature. The Palo Alto NetworksTM PA-200 is targeted at high speed Internet gateway deployments within distributed enterprise branch offices. Latest Release: Feb 26, 2019. Terraform. Spread ingestion across the available collectors: Multiple device forwarding preference lists can be created. When you have your plan finalized, heres what you need to do The Active-Secondary will merge the configuration sent by the Active-Primary and enqueue a job to commit the changes. You will need to stop the VM to change the size.Note:Azure VMs include a local/temporary disk that is meant to be used as swap disk and is not for persistent storage. This subreddit is for those that administer, support or want to learn more about Palo Alto Networks firewalls. For reference, the following tables shows bandwidth usage for log forwarding at different log rates. Calculating Required StorageForLogging Service. Calculating the Size of a Firewall For Your Network February 24, 2022 We live in a world where security breaches and data losses are expected. With default quota settings reserve 60% of the available storage for detailed logs. High availability with active/active and active/passive modes. Additionally, some companies have internal requirements. PAN-OS 7.0 and later include an explicit option to write each log to 2 log collectors in the log collector group. Device Location: The physical location of the firewalls can drive the decision to place DLC appliances at remote locations based on WAN bandwidth etc. thanks for the web link but i would like to know how the throughput is calculated for FW . For sizing, a rough correlation can be drawn between connections per second and logs per second. Log Storage Requirements: This is the timeframe for which the customer needs to retain logs on the management platform. For additional log storage you can attach an additional data disk VHD. Offers dual power supplies, and has a strong growth roadmap. A general design guideline is to keep all collectors that are members of the same group close together. The Active-Primary will then send the configuration to the Active-Secondary. If your firewall can do 100Mbps traffic but the SSL VPN does 20Mbps when a user is copying a large file no one else in the . By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Configure Prisma Access for NetworksAllocating Bandwidth by Location. Please use the form below for sizing recommendation from an expert on any Palo Alto Networks product. Many customers have a third party logging solution in place such as Splunk, ArcSight, Qradar, etc. : 540 Gbps. You can manage all of our next-generation firewalls with Panorama. Palo Alto Firewalls (All Series) VM Firewall Any PAN-OS Cause Larger config size can cause firewall memory and CPU utilization to spike at the time of commits. The number of logs sent from their existing firewall solution can pulled from those systems. The VM-Series model you choose for a BYOL deployment should be based on the capacities of the models and deployment use case. Install Panorama on Oracle Cloud Infrastructure (OCI) Generate a SSH Key for Panorama on OCI. VM-Series is the virtualized form factor of the Palo Alto Networks next-generation firewall. This article will cover the factors below impact your Azure VM size: If i have a chance i do SLR for them. Palo Alto Firewall. Performance and Capacities1. Product Overview. You can, however, enable proxy Cortex Data Lake. to roll out your Cortex Data Lake deployment: Configure Panorama for Cortex Data Lake (10.0 or Earlier), Configure Panorama for Cortex Data Lake (10.1 or Later), Cortex Data Lake Supported Region Information, Cortex Data Lake for Panorama-Managed Firewalls, Onboard Firewalls with Panorama (10.0 or Earlier), Onboard Firewalls without Panorama (10.0 or Earlier), Onboard Firewalls with Panorama (10.1 or Later), Onboard Firewalls without Panorama (10.1 or Later), Start Sending Logs to Cortex Data Lake (Panorama-Managed), Start Sending Logs to Cortex Data Lake (Individually Managed), Start Sending Logs to a New Cortex Data Lake Instance, Configure Panorama in High Availability for Cortex Data Lake, TCP Ports and FQDNs Required for Cortex Data Lake, Forward Logs from Cortex Data Lake to a Syslog Server, Forward Logs from Cortex Data Lake to an HTTPS Server, Forward Logs from Cortex Data Lake to an Email Server, List of Trusted Certificates for Syslog and HTTPS Forwarding.