Automated threat detection and correlation for AWS Network Firewall
Automated security operations
Automatically generate actionable Insights–not just prioritized alerts–enriched with user, device and network context across all of your AWS and any hybrid on-premises and cloud data sources.
Threat insights
Correlate threats and events automatically from AWS Network Firewall with events across your infrastructure, application, and security vendors to investigate root causes.
Rapid response
Reduce time to detect, investigate, and remediate security issues surfaced from your AWS Network Firewall rule events and alerts.
Rapid threat detection
Sumo Logic’s Cloud SIEM solution performs automated threat detection, analysis, and correlation using threat intelligence, historical searches, and out-of-the-box security rules for AWS services –including AWS Network Firewall– and any hybrid on-premises and cloud data sources. By correlating security alerts from AWS Network Firewall, other AWS services and all your security tools, Sumo Logic provides you with granular visibility for investigating threats along with context automatically enriched from user, device, and network activity.
Threat intelligence
Sumo Logic’s Threat Intelligence functionality–powered by CrowdStrike–works out-of-the-box with our AWS Network Firewall app, allowing you to quickly identify potential threats and indicators of compromise. This intelligence also helps you understand the security posture of sources connecting to your AWS and hybrid environments.
Granular visibility
Delivers a unified view of all security events for managing alerts, running analytics for rapid detection of threats, deep forensic investigation, and quick incident response.
Built with security-first principle
Our strong commitment to data security is validated by the platform’s third-party compliance attestations and certifications, including PCI DSS 3.2.1 Service Provider Level 1 attestation of compliance, SOC 2 Type 2 Audit Report, HIPAA Security Rule Attestation of Compliance, ISO 27001 Certification, and CSA STAR Level 2 Certification.
Scalable SaaS delivery model
Sumo Logic is built natively in AWS to provide flexibility, scalability, and agility as the types, quantities, and sources of your organization’s data continues to grow. Sumo Logic’s dynamic scaling can ingest petabytes of data a day giving you end-to-end visibility of your security posture at all times.
