Sumo Logic FedRAMP Solution Capabilities

Sumo Logic is FedRAMP® Moderate Authorized (package ID FR1918740338), offering federal agencies and commercial entities the same core observability and security platform as the standard product, with a small set of capability differences. For more information, see the FedRAMP Authorization page on our Sumo Logic site, or Sumo Logic in the FedRAMP Marketplace.

What capabilities does Sumo Logic's FedRAMP offering include?

The following table shows the capabilities included with Sumo Logic’s FedRAMP solution compared to Sumo Logic's standard product offering.

Category	Capability	Standard Product	FedRAMP Moderate (FED)
Abilities - Platform	Alert response	✓	✓
Abilities - Platform	App catalog	✓	✓
Abilities - Platform	Training: Learn and certification	✓	✓
Abilities - Solutions	Application observability	✓
Abilities - Solutions	AWS observability	✓
Abilities - Solutions	Logs for Security	✓	✓
Abilities - Solutions	Cloud SIEM	✓	✓
Abilities - Solutions	Cloud SOAR / Automation Service	✓
Abilities - Solutions	Software Development Optimization	✓
Abilities - Solutions	Kubernetes observability	✓	✓
Administration - Account	Account overview	✓	✓
Administration - Account	Data management	✓	✓
Administration - Personal	Preferences	✓	✓
Administration - Security	Access keys	✓	✓
Administration - Security	Installation tokens	✓	✓
Administration - Security	Password policy	✓	✓
Administration - Security	Policies	✓	✓
Administration - Security	SAML	✓	✓
Administration - Security	Service allowlist settings	✓	✓
Administration - Users and Roles	Roles	✓	✓
Administration - Users and Roles	Users	✓	✓
Collection	Hosted collectors	✓	✓
Collection	Installed collectors	✓	✓
Collection	OpenTelemetry collector	✓	✓ OS support: Linux and Windows UI: No workflow to add collector.
Collection - Amazon Web Services	Amazon CloudFront	✓	✓
Collection - Amazon Web Services	Amazon S3	✓	✓
Collection - Amazon Web Services	Amazon S3 Audit	✓	✓
Collection - Amazon Web Services	AWS CloudTrail	✓	✓
Collection - Amazon Web Services	AWS CloudWatch Metrics	✓	✓
Collection - Amazon Web Services	AWS Elastic Load Balancing	✓	✓
Collection - Amazon Web Services	AWS Kinesis Firehose for Logs	✓	✓
Collection - Amazon Web Services	AWS Kinesis Firehose for Metrics	✓	✓
Collection - Amazon Web Services	AWS Inventory	✓
Collection - Amazon Web Services	AWS Metadata	✓	✓
Collection - Amazon Web Services	CSE AWS EC2 Inventory	✓
Collection - Archive	AWS S3 archive	✓	✓
Collection - Cloud APIs	Akamai SIEM API	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Azure Event Hubs	✓	✓
Collection - Cloud APIs	Box	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Carbon Black Cloud	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Carbon Black Inventory	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Cisco AMP	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Cloud Syslog	✓	✓
Collection - Cloud APIs	CrowdStrike	✓	✓
Collection - Cloud APIs	Crowdstrike FDR	✓	✓
Collection - Cloud APIs	Cybereason	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Dropbox	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Duo	✓	✓
Collection - Cloud APIs	G Suite Apps Audit	✓	✓
Collection - Cloud APIs	GCP Metrics	✓	✓
Collection - Cloud APIs	Google Cloud Platform	✓	✓
Collection - Cloud APIs	Google Workspace	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	HTTP Logs & Metrics	✓	✓
Collection - Cloud APIs	HTTP Traces	✓
Collection - Cloud APIs	Microsoft Azure AD Inventory	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Microsoft Graph Security API	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Mimecast	✓	✓
Collection - Cloud APIs	MS Graph Azure AD Reporting	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	MS Graph Identity Protection	✓	✓
Collection - Cloud APIs	Netskope	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Netskope WebTx	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Office 365 Audit	✓	✓
Collection - Cloud APIs	Okta	✓	✓ Available upon request within 5 business days
Collection - Cloud APIs	Palo Alto Cortex XDR	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Proofpoint On Demand	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Proofpoint TAP	✓	✓
Collection - Cloud APIs	RUM HTTP Traces	✓
Collection - Cloud APIs	Salesforce	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	SailPoint	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	SentinelOne Mgmt API	✓	✓
Collection - Cloud APIs	Sophos Central	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Symantec Web Security Service	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Tenable	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	Workday	✓	✓ Available upon request within 5 business days.
Collection - Cloud APIs	1Password	✓	✓ Available upon request within 5 business days.
Dashboards	Dashboard reports	✓	✓
Manage Data - Logs	Data forwarding	✓	✓
Manage Data - Logs	Data tiering	✓ Only included with Enterprise Suite License.	✓ Only included with Enterprise Suite License.
Manage Data - Logs	Fields	✓	✓
Manage Data - Logs	Field extraction rules	✓	✓
Manage Data - Logs	Partitions	✓	✓
Manage Data - Logs	Scheduled searches	✓	✓
Manage Data - Logs	Scheduled views	✓	✓
Manage Data - Metrics	Logs-to-Metrics	✓	✓
Manage Data - Metrics	Metrics Rules	✓	✓
Manage Data - Metrics	Metrics transformation rules	✓	✓
Manage Data - Monitoring	Connections	✓	✓
Manage Data - Monitoring	Health events	✓	✓
Manage Data - Monitoring	Monitors	✓	✓
Manage Data - Monitoring	SLOs	✓	✓

FAQ

What is Sumo Logic's FedRAMP authorization level?

Sumo Logic is FedRAMP Moderate Authorized under package ID FR1918740338. You can verify this listing in the FedRAMP Marketplace.

What's different between the FedRAMP and standard Sumo Logic product?

Most core capabilities, including Logs for Security, Cloud SIEM, data collection, and administration features, are available in both offerings. A few solutions and sources aren't available in the FedRAMP environment, including Application Observability, AWS Observability, Software Development Optimization, Cloud SOAR/Automation Service, AWS Inventory, and CSE AWS EC2 Inventory. Several cloud API sources are available in FedRAMP only upon request, typically within five business days.

Who should use Sumo Logic's FedRAMP offering?

Federal agencies and commercial entities that must meet FedRAMP Moderate compliance requirements should use the FedRAMP-authorized environment rather than the standard product.

Is Cloud SIEM available in Sumo Logic's FedRAMP environment?

Yes. Cloud SIEM is available in the FedRAMP Moderate environment, along with Logs for Security. Cloud SOAR and the Automation Service, however, aren't included in FedRAMP.

Are all AWS collection sources available in Sumo Logic's FedRAMP environment?

Most are, but a few, including AWS Inventory and CSE AWS EC2 Inventory, aren't available in the FedRAMP environment. Several cloud API sources are available only upon request, typically within five business days.