If one organization has multiple remote sites with a firewall at each location, there are two ways to setup a syslog server for the firewalls:
Create a new organization in RocketCyber for each location, deploy an agent to a local machine and set up an individual syslog server for each
Example:
- Acme - Miami
- Acme - Dallas
- Acme - Vancouver
OR
Create a VPN tunnel for each location and send traffic to one syslog server