FORWARD VPN LOGS FROM CHECKPOINT FIREWALL TO NAC SOLUTION

[Harish_Sankaran]

Hi Guys,

I want to transfer only VPN logs from checkpoint firewall to 3rd party Server i.e: NAC solution server.

Is there any documents to integrate only the VPN logs. Can you please provide me the exact configuration to integrate VPN logs.

[PhoneBoy]

The only way to export any logs is Log Exporter.
Whether your NAC solution can ingest and make sense of those logs is an entirely different matter.

A better solution (IMO) would be to leverage the Identity Awareness API.
You can query the users currently associated with different IPs directly rather than having to parse logs and assume that association is still valid.
Some NAC solutions like Forescout leverage this.
Note you would have to have Identity Awareness enabled and have Remote Access enabled as one of the Identity Sources.

[Harish_Sankaran]

Hi,

So, you mean to say particular VPN logs cannot forward to 3rd party server.

Entire checkpoint management logs will forward to 3rd party server. Correct?