topic Re: FORWARD VPN LOGS FROM CHECKPOINT FIREWALL TO NAC SOLUTION in General Topics

FORWARD VPN LOGS FROM CHECKPOINT FIREWALL TO NAC SOLUTION

Harish_Sankaran — Fri, 11 Sep 2020 08:43:10 GMT

Hi Guys,

I want to transfer only VPN logs from checkpoint firewall to 3rd party Server i.e: NAC solution server.

Is there any documents to integrate only the VPN logs. Can you please provide me the exact configuration to integrate VPN logs.

Re: FORWARD VPN LOGS FROM CHECKPOINT FIREWALL TO NAC SOLUTION

PhoneBoy — Fri, 11 Sep 2020 22:42:06 GMT

The only way to export any logs is Log Exporter.
Whether your NAC solution can ingest and make sense of those logs is an entirely different matter.

A better solution (IMO) would be to leverage the Identity Awareness API.
You can query the users currently associated with different IPs directly rather than having to parse logs and assume that association is still valid.
Some NAC solutions like Forescout leverage this.
Note you would have to have Identity Awareness enabled and have Remote Access enabled as one of the Identity Sources.

Re: FORWARD VPN LOGS FROM CHECKPOINT FIREWALL TO NAC SOLUTION

Harish_Sankaran — Mon, 14 Sep 2020 04:20:54 GMT

Hi,

So, you mean to say particular VPN logs cannot forward to 3rd party server.

Entire checkpoint management logs will forward to 3rd party server. Correct?