Hi Gianluca Giordano
Did you see my post.. Maybe you can use that?
Sandblast for Office 365 Log Transport Agent
By the way you don't have to configure anything on the central management server from GUI.
just access your Sandblast for O365 at https://cloud.checkpoint.com and download and configure your LTA..
install LTA on one of your server. I have chosen to install it on my central management server, configured the OPSEC and setup SIC. After 2 month discussing back and forth, we had to install a special fw1 hotfix which would solve ELA issues.. and it would automatically loaded into your log server.
please be aware whent he fw1 hotfix is not installed kernel will crash, and try to restart check point services. when it is installed everything works.
when it works for your, you can search in SmartEvent and filter on ORGIN:<name of your server where the LTA is running>
Please see link above for an example of a Sandblast for O365 log into your Central management server.
Best Regards
Kim