topic Re: Mail alerts for outgoing Ldap traffic for detect log4j or any recommendations are welcome. in General Topics

Mail alerts for outgoing Ldap traffic for detect log4j or any recommendations are welcome.

AS2021 — Tue, 21 Dec 2021 08:56:34 GMT

Hi everyone,

Is it possible in Checkpoint to put up mail or SMS alerts on ldap notices out of the house? In connection with log4j, we would like to use it as an alert that we have been compromised. If in other good suggestions for detection whether one is compromised by log4j, then we are very open.

Thanks

Re: Mail alerts for outgoing Ldap traffic for detect log4j or any recommendations are welcome.

_Val_ — Tue, 21 Dec 2021 09:02:13 GMT

Not exactly what you are looking for, but you may want to use this: https://community.checkpoint.com/t5/SmartEvent/log4j-views/m-p/136794#M33

Re: Mail alerts for outgoing Ldap traffic for detect log4j or any recommendations are welcome.

AS2021 — Tue, 21 Dec 2021 09:25:12 GMT

Hi
Thanks for the link.
But I am looking for if possible in checkpoint smartconsole set mail alerts for outgoing ldap traffic if suspicious for log4j activity?

If match this activity then get alert and send mail notification to us or send sms to phone ?

Re: Mail alerts for outgoing Ldap traffic for detect log4j or any recommendations are welcome.

_Val_ — Tue, 21 Dec 2021 09:31:22 GMT

Update IPS, find relevant attack, set customer alerts with emails.

The protection details are here: https://www.checkpoint.com/defense/advisories/public/2021/cpai-2021-0936.html