Manage Check Point (LEA) Servers

    The Check Point link lets you manage the LEA servers (Check Point Management Servers) that have been configured to connect to Check Point firewalls and access the log files.

    The list of LEA servers (Check Point Management Servers) configured, along with the respective LEA listener port and authentication details, is displayed. The details of the Check Point Firewalls are listed in a table. The description of the table columns are as given below:

    Parameter Description
    Firewall Name The name of the Check Point Firewall being monitored.
    SysLog Server The name of the SysLog server from which the log will be extracted.
    Lea Port The port on which Firewall Analyzer has to connect to the Check Point firewall for LEA (Log Extraction API) access.
    Authenticated Indicates whether the connection between Firewall Analyzer and Check Point Firewall is authenticated.
    Action To remove the Check Point Firewall in Firewall Analyzer from being monitored.

     

    Add Check Point

    Carry out the following procedure to add a Check Point Firewall in the Firewall Analyzer:

    • Enter the IP address/host name of the LEA server (Check Point Management Servers)
    • Enter the port on which it has to connect to the Check Point firewall.
    • Use the Enable Debugging Mode checkbox to enable the Check Point firewall in debugging mode. For debugging the procedure is given below.
    • If you are using an unauthenticated connection, select the Use Un-Authenticated Login radio button. Follow the detailed instructions to configure Check Point firewall in Un-authenticated mode.
    • If you are using an authenticated connection, select the Use Authenticated Login radio button. Follow the detailed instructions to configure Check Point firewall in Authenticated mode.
    • Click Save to add the LEA server.

    If you are unable to view the Check Point Firewall reports carry out the following procedure:

    • Click the Edit/Delete icon of the firewall for which you are unable to view reports. Click Save.
    • Click the Enable Debugging Mode checkbox to enable the Check Point firewall in debugging mode.
    • Once saved, create a support information file through Support tab, and send to fwanalyzer-support@manageengine.com
    Note: The Configuring Check Point Firewalls section includes detailed instructions on configuring Check Point firewalls for reporting in Firewall Analyzer