When deploying or conducting POC for SandBlast Agent you most probably use dedicated machine for Endpoint management while your primary Check Point log server may be already configured with all your customized settings and even integration with SIEM.
In that case you would want to sent all your logs securely from Endpoint log server to your primary Check Point log server.
Check this SK to forward the logs from Endpoint log server to your primary Check Point log server using LEA
sk72980 How to configure SmartLog/SmartEvent to read logs from an external Log Server using LEA
