Management
Management

STRM and Checkpoint SmartCenter with several FWs

10.06.10   |  
‎10-06-2010 09:16 AM

Hi Guys,

 

I've started to deploy a STRM 5000 Series II to replace a Cisco MARS. I've connected our FW-management - Checkpoint SmartCenter - via OPSEC/LEA. The STRM successfully receives the log data from the firewalls connected to that management.

Now I'm trying to figure out, if there's a possibility to differentiate between the firewalls instead of seeing all those events coming from the management as source. The Cisco Mars is capable of doing so. There I can see which log data came from which firewall giving me the ability to use different rules for e.g. internal or external FWs.

Do you have some hints about how to solve that issue?

 

Thanks alot!

 

Greetz Roman

2 REPLIES
Highlighted
Management
Solution
Accepted by topic author RomanR
‎08-26-2015 01:27 AM

Re: STRM and Checkpoint SmartCenter with several FWs

10.08.10   |  
‎10-08-2010 06:01 AM

Hi!

Problem's solved...

It was too simple. If there's anybody out there facing the same problem:

You select the Checkpoint Smartcenter-Log Source and uncheck the field  "Use Server IP for Log Source"

then the STRM does differentiate between the the connected FWs.

 

Catch ya!

Management

Re: STRM and Checkpoint SmartCenter with several FWs

12.02.10   |  
‎12-02-2010 09:47 AM

Dear all,

               i am configure STRM5000 to receive log from checkpoint. i am doing everything form our site but finally i am getting error  "fail to pull ssl certificate"