...
Log Type | Ingestion label | Preferred Logging Protocol - Format | Log Collection Method |
|---|---|---|---|
Check Point Harmony Endpoint | CHECKPOINT_FIREWALL | Syslog (KV) | CyberHub |
...
Source | Destination | Port |
|---|---|---|
Check Point | CyberHub | 514 (UDP) |
To facilitate secure communication and align with our best practice, we strongly encourage the use of Transport Layer Security (TLS) between your security devices and our Adaptive MxDR platform for event forwarding.
While we understand that TLS support may not be available on all devices, if your devices do support TLS communication, we recommend utilizing port 6514 for seamless integration.
In some cases, the upgraded version of the device might incorporate TLS support without prior notice. If you come across such a scenario or for further assistance in configuring TLS, we kindly ask you to reach out to your dedicated Adaptive MxDR Service Delivery Lead.
Device Configuration
Navigate to Endpoint Settings > Export Events
Click Add
The New Logging Service window opens
Fill in the export details:
Name - Enter a name for the exported information.
IP Address - Enter the IP Address of the target to which the logs are exported.
Protocol - Select the protocol over which to export the logs: UDP.
Format - Select the Syslog format.
Port - Select the port over which to export the logs. Port - 514
Click Add.
...
Property | Default Value | Description |
|---|---|---|
IP Address | Check Point Harmony Endpoint interface IP address | Hostname or IP address of the device which forwards logs to the CyberHub. |