AnsweredAssumed Answered

LEA port not listening

Question asked by Justin Hickey on Jan 16, 2018
Latest reply on Jan 17, 2018 by Dameon Welch-Abernathy

I have a Checkpoint Log Server that is the center point of logs for 6 firewalls. I've setup a LEA connection to that server from a SOC log collection appliance, TCP 18186, which works fine, and another one to a QRadar SIEM 18185 which doesn't work at all. I've restarted services and rebooted, the LogServer just wont listen on the port. I've confirmed this with netstat. Attached is the fwopsec file from the Checkpoint logs server. Any help is appreciated. 

 

Thanks,

Justin

Attachments

Outcomes