Scenario: A Citrix Engineer needs to forward the Citrix Web App Firewall log entries to a central management service. This central management service uses an open log file standard.
Which log file format should the engineer use in the Citrix Web App Firewall engine settings to designate the open log file standard?
The Common Event Format (CEF) is an open log management standard that enhances the interoperability of security-related information from various security and network devices and applications. This makes it a suitable choice for forwarding logs to a central management service that uses an open log file standard.
The Web App Firewall also supports CEF logs. CEF is an open log management standard that improves the interoperability of security-related information from different security and network devices and applications https://docs.netscaler.com/en-us/citrix-adc/current-release/application-firewall/logs.html
A. CEF The Common Event Format (CEF) is an open log management standard that facilitates interoperability between security-related information from different security and network devices and applications. It's designed to allow easy integration and aggregation of logs from different systems into a central management service.