Hi @erwingdavid ,

Yes, you can send syslog to a forwarder that is on-premises. You can configure syslog on the appliance to stream syslog messages directly from enterprise firewall or proxy servers.

The logs are then written to a file on the appliance and can be processed and uploaded to your Netskope tenant instance in the cloud. For detailed steps on configuring syslog on the appliance, you can refer to the Netskope documentation.

Some more Reference documentation:

• https://community.netskope.com/dlp-7/netskope-cloud-log-shipper-syslog-integration-589
• https://docs.netskope.com/en/netskope-help/appliances/on-premises-appliance/configure-log-uploads/configure-syslog-on-the-appliance/
• https://docs.netskope.com/en/netskope-help/appliances/on-premises-appliance/manage-the-appliance/audit-events-generated-by-the-appliance-cli-116004/
• https://docs.netskope.com/en/netskope-help/data-security/netskope-secure-web-gateway/about-netskope-secure-web-gateway/
• https://docs.netskope.com/en/netskope-help/appliances/virtual-appliance/virtual-appliance-overview/

Feel free to mark the reply as “Best Answer” if it helps to answer your question.