Logsign doesn’t only serve the requirements of a SIEM solution, but it also gets integrated with PaloAlto, Fortigate, CheckPoint and make it execute custom actions by sending API requests. For example, if a client IP visits an unwanted URL, Logsign could block that IP’s web access permanently or for a custom time interval.
By selecting Settings > Action & Notification > Custom Action Devices from the Logsign WEB interface, we press the New Device button to select the device to be integrated.