Website boundary
This marketing website is static content. It does not provide a configuration upload route, customer assessment workspace, account portal or browser-based firewall analysis engine.
Assessment boundary
Sentry One reads exported Palo Alto PAN-OS and Fortinet FortiGate configuration files on the assessment machine. The assessment workflow does not require firewall credentials, firewall API access or a cloud assessment platform.
Remediation boundary
Assessment runs entirely offline. The optional Remediation module is the only component that contacts a device, and only when you apply an approved change plan.
ConfigVault backup boundary
ConfigVault is a separate Windows collector for scheduled, encrypted Palo Alto Networks firewall configuration backups. Backup destinations, recovery keys, credentials, licence material and configuration files are handled in the collector environment.
What not to send
Do not email firewall exports, credentials, logs, packet captures or identifiable client material to SentryIQ unless a separate handling process has been agreed.