Other Network Source Checkpoint,Fortinet Cortex can auto stich

P.Khongwong — Fri, 10 Oct 2025 04:37:27 GMT

Hi Expert ,

I would like to know about when ingest third party firewall checkpoint, fortigate to cortex xdr will auto stich or correlation like pan ngfw ? on case

Thank you

Re: Other Network Source Checkpoint,Fortinet Cortex can auto stich

eluis — Fri, 10 Oct 2025 11:42:29 GMT

Hi @P.Khongwong

Yes, when you ingest Checkpoint Fw and Fortinet Fw logs, they are stitched by XDR and you can use the alert mapping so that the alerts from the Fw are created in XDR too.

Please check the docs:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-3.x-Documentation/Visibility-of-Cortex-XDR-audit-and-authentication-logs

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-3.x-Documentation/Ingest-logs-from-Fortinet-Fortigate-firewalls

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-3.x-Documentation/Ingest-Report-Data-from-Workday

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution".

Thank you.

topic Re: Other Network Source Checkpoint,Fortinet Cortex can auto stich in Cortex XDR Discussions

Other Network Source Checkpoint,Fortinet Cortex can auto stich

Re: Other Network Source Checkpoint,Fortinet Cortex can auto stich