Cybersecurity Forum

This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.

isuru
New Contributor II

Checkpoint OPSEC LEA Integration

Hi,

We have been trying to integrate Checkpoint Firewall logs from Smart Console via OPSEC API. We successfully pulled the certificate from "opsec_pul_cert" CLI tool but we have an issue when trying to pull the certificate from FortiSIEM GUI.

FortiSIEM 5.3.0
Checkpoint R80.10

Did anyone come across with this issue before?

Regards,
Isuru
Cheers,
Isuru Malawige
Cheers,Isuru Malawige
1 Solution
5 REPLIES 5
FSM_FTNT
Staff
Staff

Hi Isru,

CheckPoint can be interesting to integrate with due to certificates, certificate hashing and CheckPoint architecture. 

Simple things to check:

Make sure connectivity is available to CP from FSM Super or Collectors.
Are you using SmartCenter or is it CLM, MLM, CLA.
Check what version of CheckPoint is running.


Probably a more straightforward way to integrate is to forward events from CP in Syslog CEF format, this is supported by FortiSIEM and CheckPoint supports this now.
isuru
New Contributor II

Hi Daniel,

Thanks for the update. There's no connectivity issue. We are using "Checkpoint SmartConsole" for "R80.10" Firewalls.

I will look into syslog as well.

Regards,
Isuru
Cheers,
Isuru Malawige
Cheers,Isuru Malawige
isuru
New Contributor II

Hi Daniel,

Regarding the Syslog Forwarding... Were you referring to this kind of a scenario (https://qostechnology.in/blog/syslog-integration-with-checkpoint/) or the 'Checkpoint log exporter' ??

Regards,
Isuru
Cheers,
Isuru Malawige
Cheers,Isuru Malawige
isuru
New Contributor II

Hi Dan,

Thanks, I will look into this.

Regards,
Isuru
Cheers,
Isuru Malawige
Cheers,Isuru Malawige
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.