Checkpoint integration with Claroty CTD is not working

[Narsimha_Rao_Ko]

We have deployed Claroty CTD sensor in one of our customer locations. We want to integrate CTD with CP Management. IoT discovery service object has been configured in CP Mgmt console and it is able to connect to CTD and we are getting the IoT objects information.

However, it is not creating IoT policy and new Threat Prevention profile and rule in the Threat Prevention policy. This information has been mentioned in the “CP_R80.40_SecurityManagement_AdminGuide” under “Creating a Threat Prevention Policy” section.

[Shlomi_Feldman]

hi,

this is a compatibility issue between different versions. can you please share with me the CTD version you are using?

Shlomi

[omershe]

Hello, 

Please verify that the suggested policies are enabled in the IoT Controller.

1. Navigate to the MNGT vsec.conf:  $FWDIR/conf/vsec.conf
2. Modify the: iotdiscovery.policySource=VISIBILITY_RULES to >> iotdiscovery.policySource=VENDOR
3. Run vsec off and then vsec on

If the iotdiscovery.policySource is already set to VENDOR, then please contact me at omershe@checkpoint.com

Thanks,

Omer 

[Narsimha_Rao_Ko]

Thanks, Omer for the steps. I will try to follow the above steps and contact you if the problem still persists.