Occasional Contributor



From my understanding, ATA Gateway can be fed in three different ways:

-Port Mirroring




Then, if you are using the lightweight Gateway, you do not need Port Mirroring or WEF, however, what are the SIEM logs used for ? I have read that only specific events can be forwarded from the SIEM to the Gateway, is that correct ? What are those events ?


Thank you,



We support Ukraine and condemn war. Push Russian government to act against war. Be brave, vocal and show your support to Ukraine. Follow the latest news HERE