Smart-1 Cloud - forward to siem

[FenZ45]

Hi Experts!

The setting of "forward log to SIEM" in the smart-1 cloud portal, requires a license or it's a free? Do this option works similiar to the "log export" function? 

I've found contradictory information about this, so i'm looking for help.

Regards.

[the_rock · Accepted solution]

You dont need separate license for it, works fine with regular license. And yes, it works literally same as log export.

Cheers,

Andy

[the_rock]

All good now?

Andy

[agtaub]

Hi there 🙂

I would like to ask you if there is any limitation on the amount of logs per day that the smart-1 cloud can receive from the gateways, or if you can configure what kind of logs can be sent to the cloud.

I would be very grateful for your help

[PhoneBoy]

The limits in Smart-1 Cloud depend on the SKUs you've purchased.
They are listed on the datasheet: https://www.checkpoint.com/downloads/products/smart-1-cloud-security-management-datasheet.pdf 
You cannot choose to send only specific logs to the cloud.

[the_rock]

I believe its 5 GB/day, but I emailed our SE to verify.

Andy

[the_rock]

Just got a response from SE and he said for enterprise package, it can go up to 15 BG/day, but with add-on, you can extend it to 20 GB/day.

Hope that helps.

Andy