Trend micro DDI Integration with checkpoint

[Rahul_Borah]

Hi Expert,

 My client wants to Integrate Trend micro DDI with the checkpoint.

My concern, Is there any impact of performance in Checkpoint if Trend micro DDI Integrate with the checkpoint.

Regards,

Rahul

[FedericoMeiners]

Rahul,

As far as I see it uses OPSEC and SAM rules to perform enforcments, OPSEC is fine, regarding SAM rules there are better ways to manage traffic with SecureXL blacklists but it seems that you cannot use it with the default integration. Also these configurations are enforced through the management server as far as I see.

If your memory / CPU is not high (50/60%) you should be fine to use them. 

One thing, you may need to adapt the instructions from DDI to R80.X since they are made with R77.X in mind.

Regards,

Federico Meiners

[Rahul_Borah]

Hi Federico,

Thanks for your reply. I have a little confusion regarding rule creation for this activity. What will be the source for this, Its checkpoint gateway IP address or Checkpoint management IP address. And I believe destination should be the DDI ip address.

Regards,

Rahul