Video Screencast Help
Search Video Help Close Back
to help

SSIM to be integrated with checkpoint r75 or gaia

Created: 18 Dec 2012 | 4 comments
atul557's picture
atul557
0 0 Votes
Login to vote

I want to integrate or install a SIM agent on checkpoint r75 or splat OS.

so is there a agent available for it.

Discussion Filed Under:
,

Comments 4 Comments • Jump to latest comment

maximb@netcom.co.il's picture
maximb@netcom.co.il Accredited
SSIM to be integrated with checkpoint r75 or gaia - Comment:19 Dec 2012 : Link

You should use LEA collector 4.4 and after installation run LiveUpdate. After that this collector can collect events from r75 and gaia.

0
Login to vote
Mike Buckley's picture
Mike Buckley Partner Accredited
SSIM to be integrated with checkpoint r75 or gaia - Comment:19 Dec 2012 : Link

The Check Point collector works just fine with R75, and SPLAT is just Linux so you can output to a SSIM syslog collector if you want OS stuff as well.

Not done much with Gaia apart from a couple of basic installs but it's Linux as well so syslog.

 

You can't install an agent so you'll need another server for that if you definitely want to run off box (or if 4.8 you have no choice)

0
Login to vote
atul557's picture
atul557
SSIM to be integrated with checkpoint r75 or gaia - Comment:30 Dec 2012 : Link

Can someone provide me steps to integrate ssim with R75 or gaia?

0
Login to vote
Avkash K's picture
Avkash K Partner
SSIM to be integrated with checkpoint r75 or gaia - Comment:18 Jan 2013 : Link

Hi Atul,

It depends on your collector installation.

 

  • A local collector resides on the LEA server.
  • A remote collector does not reside on the LEA server.
  • In a distributed collector installation, the Check Point FireWall-1 gateway,

    Check Point Management Server, and Check Point Log Server reside on separate machines, and the collector may reside either on the log server machine, or another machine altogether.

 

Depending on all this :

  • For a remote installation, specify sslca in this

    field.

  • For sslca, both client and server must provide

    certificates that are created and signed by a trusted certificate authority.

  • For a local installation, specify local in this

    field.

  • For a distributed installation, specify local in

    this field.

 

Please refer below links for your reference:

http://www.symantec.com/docs/TECH180284

 

Hope that will help you!

Regards,

Avkash K

0
Login to vote