Hello everyone,
I have a customer who has 5 1590 SMB Quantum Sprak appliances managed centrally in Smartconsole, they doesn't have Log Server, all log were saved to The Management Service.
Now, they want to export logs to the SIEM server (Splunk) on DC, I follow this guide: Configuring Log Exporter in SmartConsole (checkpoint.com).
But at 2. Configure the Management Server: I can't edit the Management Object, details at the *picture below.
I have tried another way (Configuring External Log Servers (checkpoint.com)), using external log server => add syslog server on every appliance (UDP, add rule, vpn), but it does still not solve the problem (my gateway can't connect to the DC, although devices behind gateway can?)
Can someone help me on this, please.