Greetings all. I’ve got a customer interested in forwarding Citrix analytics services logs to MS sentinel. We are aware that Citrix is no longer selling CAS to new or existing Citrix Cloud customers. we’re looking to see what kind of support we’d get if we open a ticket to Citrix if we run into any issues following the related KBs on CAS to MS sentinel integration. Does anyone know? Are we are on our own if we run into any issues ? Road map wise , we know the CAS functionality will go to Uber Agent and monitor , but our customer has a short term security requirement to start shipping CAS logs to MS Sentinel , so we can’t wait till full parity of CAS is covered by Uber agent / Citrix monitor https://docs.citrix.com/en-us/security-analytics/siem-integration/azure-sentinel-integration.html

We still have support if the customer owns it.

Thank you , Rob !

Can confirm, we received CAS/CAP post "cut-off" and can still open tickets on it.