topic Checkpoint integration with Claroty CTD is not working in Firewall and Security Management

Checkpoint integration with Claroty CTD is not working

Narsimha_Rao_Ko — Thu, 24 Sep 2020 07:37:06 GMT

We have deployed Claroty CTD sensor in one of our customer locations. We want to integrate CTD with CP Management. IoT discovery service object has been configured in CP Mgmt console and it is able to connect to CTD and we are getting the IoT objects information.

However, it is not creating IoT policy and new Threat Prevention profile and rule in the Threat Prevention policy. This information has been mentioned in the “CP_R80.40_SecurityManagement_AdminGuide” under “Creating a Threat Prevention Policy” section.

Re: Checkpoint integration with Claroty CTD is not working

Shlomi_Feldman — Sun, 27 Sep 2020 05:16:58 GMT

hi,

this is a compatibility issue between different versions. can you please share with me the CTD version you are using?

Shlomi

Re: Checkpoint integration with Claroty CTD is not working

omershe — Sun, 27 Sep 2020 10:03:08 GMT

Hello,

Please verify that the suggested policies are enabled in the IoT Controller.

1. Navigate to the MNGT vsec.conf: $FWDIR/conf/vsec.conf
2. Modify the: iotdiscovery.policySource=VISIBILITY_RULES to >> iotdiscovery.policySource=VENDOR
3. Run vsec off and then vsec on

If the iotdiscovery.policySource is already set to VENDOR, then please contact me at omershe@checkpoint.com

Thanks,

Omer

Re: Checkpoint integration with Claroty CTD is not working

Narsimha_Rao_Ko — Wed, 14 Oct 2020 14:14:13 GMT

Thanks, Omer for the steps. I will try to follow the above steps and contact you if the problem still persists.