About SAL (OnPrem)

You can configure SAL (OnPrem) to store firewall event data for increased storage at a larger retention period. By deploying Secure Network Analytics appliances and integrating them with your firewall deployment, you can export your event data to a Secure Network Analytics appliance.

This provides you with the following capabilities:

• Store events on the Secure Network Analytics appliance.

• Specify this remote data source to view these events in the management center.

• Review event data from the Secure Network Analytics Manager (formerly Stealthwatch Management Console) Web App UI using the Event Viewer.

• Cross-launch from the management center UI to the Event Viewer to view additional context on the information from which you cross-launched.