Hi Guys,
I've started to deploy a STRM 5000 Series II to replace a Cisco MARS. I've connected our FW-management - Checkpoint SmartCenter - via OPSEC/LEA. The STRM successfully receives the log data from the firewalls connected to that management.
Now I'm trying to figure out, if there's a possibility to differentiate between the firewalls instead of seeing all those events coming from the management as source. The Cisco Mars is capable of doing so. There I can see which log data came from which firewall giving me the ability to use different rules for e.g. internal or external FWs.
Do you have some hints about how to solve that issue?
Thanks alot!
Greetz Roman
#STRM