The exhibit shows a FortiSIEM cluster deployed in a multi-tenant service provider environment, serving multiple customers. The architecture includes:
1. Customers with Collectors
Customer A and Customer B (AWS) have collectors deployed within their environments.
Collectors gather and forward logs to the FortiSIEM cluster for centralized analysis.
2. Customers Without Collectors
Customer C does not have a collector; instead, it sends logs directly to the FortiSIEM cluster.
3. Super Organization Managing Infrastructure
The service provider infrastructure devices (e.g., networking and security appliances) are managed directly by the FortiSIEM cluster.
This mixed setup, where some customers use collectors while others send logs directly, represents a hybrid deployment with and without collectors.