Check Point FW-1 LogGrabber integration

[Liam_Churchman]

Hi can anyone shed some light on setting up fw1-loggrabber with Check Point management.

I have a current setup running in CentOS using sslca as auth_type but SIC connectivity fails between the OPSEC LEA client and server. I am unable to pull opsec.p12 certificate successfully from the management server.

Any help would be much appreciated.

[PhoneBoy]

Why not use Log Exporter instead, which will export the logs using standard syslog?

Log Exporter guide‌

[Liam_Churchman]

I'd like to set this up to send logs to Splunk using TLS encryption. Does this remove the need for an OPSEC Splunk object to be created within the firewall?

[PhoneBoy]

It should, yes.