CloudGuard WAF question

[the_rock]

Hey guys,

Customer asked this question and I cant seem to find the answer to it in the admin guide and its not clear from the portal either. My colleague and I looked at it together, but based on what I attached, we cant tell if logs from Cloudguard WAF can be sent to syslog encrypted or not? 

https://waf-doc.inext.checkpoint.com/

Tx as always.

Andy

[yuvalmamka · Accepted solution]

Hi,

Logs can be sent in 2 ways:

1. Directly from the agent (via Log Triger) - this way the logs are being sent in clear text.
2. From the Infinity Portal (via Event Forwarding) - this way they can be encrypted, according to the configured method.

[the_rock]

Sorry Yuval, saw this message late. Yes, that makes total sense to me, appreciated!

Andy

[the_rock]

For the context, this was what we did not realize from S1C portal.

Thanks @yuvalmamka 

Andy