Cloud Next-Generation Firewall

You can configure collecting Cloud Next-Generation Firewall logs using a data source:

Cloud Next-Generation Firewall Description
Data Source overview You can forward firewall data from your Cloud Next-Generation Firewall (CNGFW) to Cortex XSIAM. During onboarding or by editing an existing instance, you can select specific log types to ingest to optimize data consumption and reduce costs.
Link to Data Source instructions Ingest data from Cloud Next-Generation Firewall