- Products
- Learn
- Local User Groups
- Partners
- More
Check Point Jump-Start Online Training
Now Available on CheckMates for Beginners!
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
ZTNA Buyer’s Guide
Zero Trust essentials for your most valuable assets
The SMB Cyber Master
Boost your knowledge on Quantum Spark SMB gateways!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
Hello,
We have a CheckPoint architecture under R80.30 with Enforcement module and SmartCenter, since we installing a new SIEM, we need to send the logs to the SIEM through syslog. From the Enforcement Module can we send at the same time the logs to the SmartCenter and the syslog server ? Or we need to continue to pass through the SmarCenter that send on his side the logs to the syslog server.
BRgds
Yes, it's possible to send firewall logs directly to syslog. Follow instructions from
How to configure Security Gateway on Gaia OS to send FireWall logs to an external Syslog server
Wolfgang
Considering the topic-starter is on R80.30, I would rather refer to https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
Use Log Exported by the link
Yes, log_exporter is the smarter solution. But if you want to have the logs send directly from the gateway not the CheckPoint logserver you can't use log_exporter. I think log_exporter can't be running on gateways.
Wolfgang
Log exported is the only supported solution With R80.30 and above. You probably win a second or two when forwarding directly from a gateway, but the recommended solution is to run exported on the management.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY