Exhibit.

DCFW is responsible for generating UTM logs for file server sessions initiated by Client-1. only if an IPS inspection is triggered

ISFW is responsible for generating traffic logs for only Web traffic and SMB traffic from Client-1.

The SMB session which is forwarded to NGFW logs that event

DCFW generates traffic logs for all sessions from Corporate File Server

The web session forwarded to the NGFW generates the relevant UTM logs along with initial traffic log