topic Re: Smart-1 Cloud - forward to siem in Portal

Smart-1 Cloud - forward to siem

FenZ45 — Thu, 10 Aug 2023 18:07:15 GMT

Hi Experts!

The setting of "forward log to SIEM" in the smart-1 cloud portal, requires a license or it's a free? Do this option works similiar to the "log export" function?

I've found contradictory information about this, so i'm looking for help.

Regards.

Re: Smart-1 Cloud - forward to siem

the_rock — Thu, 10 Aug 2023 20:24:45 GMT

You dont need separate license for it, works fine with regular license. And yes, it works literally same as log export.

Cheers,

Andy

Re: Smart-1 Cloud - forward to siem

the_rock — Tue, 15 Aug 2023 17:37:55 GMT

All good now?

Andy

Re: Smart-1 Cloud - forward to siem

agtaub — Tue, 25 Jun 2024 11:59:48 GMT

Hi there 🙂

I would like to ask you if there is any limitation on the amount of logs per day that the smart-1 cloud can receive from the gateways, or if you can configure what kind of logs can be sent to the cloud.

I would be very grateful for your help

Re: Smart-1 Cloud - forward to siem

PhoneBoy — Tue, 25 Jun 2024 16:29:28 GMT

The limits in Smart-1 Cloud depend on the SKUs you've purchased.
They are listed on the datasheet: https://www.checkpoint.com/downloads/products/smart-1-cloud-security-management-datasheet.pdf
You cannot choose to send only specific logs to the cloud.

Re: Smart-1 Cloud - forward to siem

the_rock — Tue, 25 Jun 2024 16:59:42 GMT

I believe its 5 GB/day, but I emailed our SE to verify.

Andy

Re: Smart-1 Cloud - forward to siem

the_rock — Tue, 25 Jun 2024 17:29:18 GMT

Just got a response from SE and he said for enterprise package, it can go up to 15 BG/day, but with add-on, you can extend it to 20 GB/day.

Hope that helps.

Andy