topic Exporting Traffic Logs in Harmony Connect in SASE and Remote Access

Exporting Traffic Logs in Harmony Connect

jcat — Wed, 05 Apr 2023 08:55:04 GMT

Hi,

We've been having major challenges to generate the the traffic logs in Harmony Connect. Each time we modify the dates, we are unable to see other dates than the current and it looks like that there are also no functions to go to next page, we have reached the bottom of the page already but still unable to see previous days.

I've heard something about SIEM integration but we are not knowledgeable with this. Is there a step by step guide somewhere? we are planning to use SolarWinds or Splunk.

Appreciate if anyone can assist.

Thank you

Re: Exporting Traffic Logs in Harmony Connect

Chris_Atkinson — Wed, 05 Apr 2023 09:04:14 GMT

Harmony Connect supports exporting all logs except Application Access logs to the third-party applications, such as SIEM. To export, go to Global Settings > Event Forwarding. For more information, see Event Forwarding in the Infinity Portal Administration Guide.

Re: Exporting Traffic Logs in Harmony Connect

jcat — Wed, 05 Apr 2023 09:14:43 GMT

Hi Chris,

thanks for the reply.

I've seen that link numerous times but as mentioned, we're novice with SIEM setup. It looks easy from Harmony Connect side but what we are trying to achieve is to have a working SIEM which can or will cater syslog from Harmony Connect. This is the guide we are looking for.

Re: Exporting Traffic Logs in Harmony Connect

PhoneBoy — Thu, 06 Apr 2023 08:13:43 GMT

The issues you’re describing with viewing the logs sound like bugs and should be reported via the TAC: https://help.checkpoint.com

As for integrating with specific SIEMs, beyond the documentation that has already been provided, I am not aware of specific integration guides with specific SIEMs.

Re: Exporting Traffic Logs in Harmony Connect

Nachmangallaghe — Wed, 03 May 2023 12:26:19 GMT

Hi, try this one..

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Infinity-Portal-Admin-Guide/Content/Topics-Infinity-Portal/Event-Forwarding.htm?tocpath=Global%20Settings%7CEvent%20Forwarding%7C_____0#Event_Forwarding