Checkpoint collector and SSIM

Created: 08 Jul 2008 | Updated: 23 May 2010 | 4 comments

Donken

Hi,

Would like to know if any one has some decent instructions for configuring SSIM to pull in checkpoint fw events. I'm using R65 on a Nokia cluster with a Win2k3 Checkpoint management&Log server. I am a Chkpt novice; we used the SGS previously.

Thanks in advance.

Discussion Filed Under:

Security, Symantec Security Information Manager

Comments RSS Feed

Comments 4 Comments • Jump to latest comment

antilles Partner Accredited

Checkpoint collector and SSIM - Comment:09 Jul 2008 : Link

Hi,

If you have access to fileconnect or platinium website, you can download a document called Symantec Event Collector for CheckPoint FW Quick Reference. You will find there guidelines how to integrate SSIM with CheckPoint firewalls.

Regards,
Antilles

Peter Blasko Partner Accredited

Checkpoint collector and SSIM - Comment:12 Oct 2008 : Link

I have connect SSIM 4.5 and Checkpoint Firewall, but in SSIM I see only logs dropped from Checkpoint. Has everyone successfully connecting SSIM and Checkpoint firewall with all logs (allow, deny, VPN, ...)

Thanks for answer.

gk Symantec Employee

Checkpoint collector and SSIM - Comment:13 Oct 2008 : Link

Your Check Point rules have to be configured to log when they're triggered. By default, they don't.

Peter Blasko Partner Accredited

Checkpoint collector and SSIM - Comment:27 Nov 2008 : Link

I have rules with Track enabled (Log), allowed packets are logged in checkpoint, but not in SSIM. Denied packets are OK.Do you have any idea?

Checkpoint collector and SSIM

Comments 4 Comments • Jump to latest comment

Would you like to reply?

Links