Can MARS 6.0.5 gets logs from CheckPoint NGX 6.5 running in a Cluster?

Unanswered Question
Dec 29th, 2009

Can MARS 6.0.5 gets logs from CheckPoint NGX 6.5 running in a Cluster? Active/Standby

Can MARS 6.0.5 gets logs from CheckPoint NGX 6.5?

Can you use MARS 6.0.5 with CheckPoint NGX 6.5?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
eegilbert Fri, 01/29/2010 - 12:36

Hi Bryan,

Yes, you can use MARS with checkpoint. You will need to make the MARS device an OPSEC client and exchange SIC keys with the firewall managers. It's not too hard and there is a pretty decent guide here:

http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.0/device/configuration/guide/chCheckPointDevices.html

I've been using this with R65, R61 and R55 and haven't had any problems with it.

Let me know if you need a hand.

Erric

Actions

This Discussion