1. Palo Alto Networks, Panorama Administrator's Guide (PAN-OS 11.0), "Panorama Models," Section: Panorama Virtual Appliance Modes. This section details the three deployment modes: "Panorama can be deployed in Panorama mode, Management Only mode, or Log Collector mode." It explicitly states the Log Collector mode is for "aggregating logs from the managed firewalls."
2. Palo Alto Networks, Strata Cloud Manager Documentation, "Get Started with Strata Cloud Manager," Section: Strata Cloud Manager Architecture. The documentation states, "Strata Cloud Manager is a cloud-based management solution that uses Cortex Data Lake to collect logs and other data from your managed firewalls." This confirms SCM's reliance on CDL for logging, not performing the function itself.
3. Palo Alto Networks, Panorama Datasheet, "Centralized Management and Reporting." The datasheet lists "Centralized Logging and Reporting" as a key feature, describing how Panorama Log Collectors "aggregate logs from multiple managed firewalls."
4. Palo Alto Networks, Strata Cloud Manager At-a-Glance, "Key Capabilities." This document lists "Consistent security policy management across all form factors" and "Automated threat intelligence and security content updates," confirming that options A and C are capabilities of SCM.