Exporting Traffic Logs in Harmony Connect

[jcat]

Hi,

We've been having major challenges to generate the the traffic logs in Harmony Connect. Each time we modify the dates, we are unable to see other dates than the current and it looks like that there are also no functions to go to next page, we have reached the bottom of the page already but still unable to see previous days.

I've heard something about SIEM integration but we are not knowledgeable with this. Is there a step by step guide somewhere? we are planning to use SolarWinds or Splunk.

Appreciate if anyone can assist.

Thank you

JC

[Chris_Atkinson]

Harmony Connect supports exporting all logs except Application Access logs to the third-party applications, such as SIEM. To export, go to Global Settings > Event Forwarding. For more information, see Event Forwarding in the Infinity Portal Administration Guide.

[jcat]

Hi Chris,

thanks for the reply.

I've seen that link numerous times but as mentioned, we're novice with SIEM setup. It looks easy from Harmony Connect side but what we are trying to achieve is to have a working SIEM which can or will cater syslog from Harmony Connect. This is the guide we are looking for.

[PhoneBoy]

The issues you’re describing with viewing the logs sound like bugs and should be reported via the TAC: https://help.checkpoint.com

As for integrating with specific SIEMs, beyond the documentation that has already been provided, I am not aware of specific integration guides with specific SIEMs.

[Nachi]

Hi, try this one..

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Infinity-Portal-Admin-Guide/C...