MARS checkpoint Integration

[jmarshall]

I have a question about MARS and checkpoint/Nokia integration. I get MARS/Checkpoint LEA to work properly, but I don't get any log data from the checkpoint servers when logging is enabled. I know logging is enabled because I can get the mgmt server to display the logs.

Also how often does MARS pull the checkpoint logs? I can't find this anywhere in the docs, and if it is pulled via the topology update schedular which is only a daily thing at best then this integration is useless.

[jmarshall]

can someone asnwer this?

[joe.favia]

Hi,

What version of Checkpoint are you using? I set this up last year with NG AI R55 and it worked straight away. The logs are exported via LEA. You should see active connections (netstat) between the management server and the MARS appliance if things have been configured correctly. You should also be able see the entries by running a report with raw messages on the MARS. IF you provide more detail I might be able to help.

Regards, Joe