ArcSight Connectors Documentation
cancel

Check Point Syslog

Version history
Revision #:
5 of 5
Last update:
‎12-20-2018 10:39 AM
Updated by:
 
Contributors
0 Kudos
Comments
jgrayson

Checkpoint R80 / R80.10 does not support forwarding from the gateway without a hotfix, and hotfix cannot be applied to some environments.

This feature is by default not available in SmartConsole R80 / R80.10.

To export Check Point FireWall logs directly from a Security Gateway / Cluster Member R80.10, contact Check Point Support to get a Hotfix (Issue ID 02646044).
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk87560&partition=Advanced&product=Security

Checkpoint currently recommend using Log Exporter for R80.x which is not covered in this document (both options should be available).

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122323