topic Re: CloudGuard WAF question in WAF

CloudGuard WAF question

the_rock — Thu, 20 Feb 2025 20:16:31 GMT

Hey guys,

Customer asked this question and I cant seem to find the answer to it in the admin guide and its not clear from the portal either. My colleague and I looked at it together, but based on what I attached, we cant tell if logs from Cloudguard WAF can be sent to syslog encrypted or not?

https://waf-doc.inext.checkpoint.com/

Tx as always.

Andy

Re: CloudGuard WAF question

yuvalmamka — Sun, 23 Feb 2025 10:15:59 GMT

Hi,

Logs can be sent in 2 ways:

Directly from the agent (via Log Triger) - this way the logs are being sent in clear text.
From the Infinity Portal (via Event Forwarding) - this way they can be encrypted, according to the configured method.

Re: CloudGuard WAF question

the_rock — Mon, 24 Feb 2025 02:44:36 GMT

Sorry Yuval, saw this message late. Yes, that makes total sense to me, appreciated!

Andy

Re: CloudGuard WAF question

the_rock — Mon, 24 Feb 2025 17:54:18 GMT

For the context, this was what we did not realize from S1C portal.

Thanks @yuvalmamka

Andy