10-06-2010 09:16 AM
I've started to deploy a STRM 5000 Series II to replace a Cisco MARS. I've connected our FW-management - Checkpoint SmartCenter - via OPSEC/LEA. The STRM successfully receives the log data from the firewalls connected to that management.
Now I'm trying to figure out, if there's a possibility to differentiate between the firewalls instead of seeing all those events coming from the management as source. The Cisco Mars is capable of doing so. There I can see which log data came from which firewall giving me the ability to use different rules for e.g. internal or external FWs.
Do you have some hints about how to solve that issue?
Solved! Go to Solution.
10-08-2010 06:01 AM
It was too simple. If there's anybody out there facing the same problem:
You select the Checkpoint Smartcenter-Log Source and uncheck the field "Use Server IP for Log Source"
then the STRM does differentiate between the the connected FWs.
12-02-2010 09:47 AM
i am configure STRM5000 to receive log from checkpoint. i am doing everything form our site but finally i am getting error "fail to pull ssl certificate"