Chronicle and syslog TLS

[mkrovatkina]

Hi,

I'm using Google Chronicle, but in the provided examples of Forwarder's config there is no options for syslog encryption/TLS. Is TLS for syslog supported by Chronicle? What about mutual TLS authentication? And if not, do you know when it will happen for both?

Thank you

[Oubi]

Hi,

You can enable Transport Layer Security (TLS) for the Syslog connection to the Chronicle forwarder. Please check the document [1]. In the Chronicle forwarder configuration file, specify the location of your certificate and certificate key.

There is no indication to mTLS with Chronicle in Google documentation, but it is used in the Google Cloud design with different products such as in [2], [3] and [4] mention. 

[1] 

https://cloud.google.com/chronicle/docs/install/forwarder-windows#enable_tls_for_syslog_configuratio...

[2] https://cloud.google.com/architecture/using-mutual-tls-to-obtain-short-lived-credentials

[3] 

https://cloud.google.com/docs/security/infrastructure/design#access-management-of-end-user-data-in-g...

[4] 

https://cloud.google.com/service-mesh/docs/security/security-overview#mutual_tls