How to receive alerts when a managed Security Gateway loses connectivity in Smart-1 Cloud

[TSOL]

Hello Experts,

I would like to receive an automatic email notification when one of the Security Gateways managed by Smart-1 Cloud goes offline (for example, when it stops or loses connectivity).

Has anyone implemented such a setup or found an effective way to detect and get alerts for this situation?
I’d appreciate any suggestions or examples from your experience.

Thank you in advance.

[the_rock]

I know it can be done, let me ask one of my colleagues in SIEM team, we have this set up for few clients.

[the_rock]

@TSOL Just spoke with one of my colleagues and he said all this was done from smart event.

[TSOL]

Thanks for your reply!
Do you mean that SmartEvent can detect when a Smart-1 Cloud managed gateway loses connectivity (for example, when the tunnel goes down)?
I thought SmartEvent only receives logs from the gateways, so I’m interested to know how this was configured.

[the_rock]

I believe so, but not sure exactly how thats configured, will confirm with my colleague tomorrow. Sorry, been few years since we did this.

[Chris_Atkinson]

Something like this looks like it might be helpful:

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Playblocks-Admin-Guide/Conten...

[the_rock]

That looks promising, Chris. The only thing is, for playblocks, I believe you need separate license?

[Chris_Atkinson]

Depends on the license tier/package correct.
https://www.checkpoint.com/resources/items/solution-brief-ai-powered-security-management-for-the-hyp...

[the_rock]

My colleague and I tested it while back, so cant recall now how licensing works, but yea, I would agree it depends on the package.