Issues Encountered

1

No native FTD eStreamer connector — Monad does not support Cisco eStreamer protocol for FTD/FMC. Only syslog input available.

Use syslog forwarding from FMC. Confirmed working with monad-syslog input during trial.

✅ Resolved

2

Trial API limitations — Trial account cannot create transforms or outputs via API. UI-only during evaluation.

Use UI for trial configuration. Full API access available in production license.

✅ Resolved

3

ISE log splitting capability unknown — Unclear if ISE MnT can route different log categories (RADIUS auth vs accounting vs profiling) to different syslog targets simultaneously.

Action: test with CHLA ISE team or request Monad support. May require multiple syslog receivers with different ports.

🔄 Pending

4

SaaS vs on-prem deployment model — Healthcare (HIPAA) may require on-prem deployment. SaaS is simpler but compliance implications unclear.

Action: CISO decision pending. Monad supports both models. SOC 2 and HIPAA certification status TBD.

🔄 Pending

5

Sentinel Connector type — Initially unclear whether Monad had native Sentinel integration or required HTTP output configuration.

Resolved: native msft-sentinel connector exists. Verified during trial.

✅ Resolved