ATP Appliances can also ingest logs from other identity and security solutions such as Active Directory, endpoint antivirus, firewalls, Secure

Web Gateways (SWGs), intrusion detection systems, and endpoint detection and response tools. The logs can be ingested either directly

from third-party devices or forwarded by existing security information and event management (SIEM)/syslog servers.