Checkpoint Configuration

The article covers the prerequisites and the steps to configure CheckPoint Firewall device on the Check Point Firewall Gaia Portal to collect its logs. 

CheckPoint is a cyber security architecture which offers the perfect combination of proven security, easy deployment, and effective management by consolidating key security applications (firewall, VPN, intrusion prevention, and antivirus and more) into a single, efficiently managed solution.

Prerequisites

• Admin Login credentials for CheckPoint Firewall.

Configuration

To configure syslog reporting on your Check Point Firewall Gaia Portal GUI,

1. Login to the CheckPoint Firewall.

2. Click System Management in the main menu, and click the System Logging tab.

3. The System Logging page appears.

4. Click on the Add tab.

IP Address: Mention “Forwarder IP address”.

Port: Mention syslog server (11550) port number.

5. Click Apply.

6. Verify whether logs are ingested in Chronicle.