topic Re: Send logs from Infinity Portal to a SIEM Solution in Portal

Send logs from Infinity Portal to a SIEM Solution

keamas — Mon, 17 Feb 2025 17:15:08 GMT

Hi is there any way to send Logs from the Infinty Portal to a SIEM Solution Like Azure Sentinel.

I would like to export CHECK POINT CloudGuard WAF Logs to Azure Sentinel automatically.

Is there any solution ?

Re: Send logs from Infinity Portal to a SIEM Solution

the_rock — Mon, 17 Feb 2025 17:32:01 GMT

Yes, there is. See if below helps you. If not, I can ask one of my colleagues, he is Linux AND Siem GENIUS, everyone says that about him 🙂

Let me know.

Andy

https://community.checkpoint.com/t5/Management/Log-exporter-amp-Splunk-TLS/m-p/126164#M27609

https://community.checkpoint.com/t5/Management/Log-exporter-TLS-config-with-QRadar/m-p/115020

https://community.checkpoint.com/t5/Infinity-Portal/Logs-from-Infinity-Portal-to-Splunk/m-p/193420#M238

Re: Send logs from Infinity Portal to a SIEM Solution

genisis__ — Mon, 17 Feb 2025 17:37:02 GMT

If I remember correctly - you will need to get the collector to generate a certificate so you can then utilise a TLS connecting inbound to the collector, and of course ensure you have the the export licenses (not expensive).

Re: Send logs from Infinity Portal to a SIEM Solution

the_rock — Mon, 17 Feb 2025 17:42:56 GMT

That sounds right. I will confirm with my colleague.

Andy