Configuring the Checkpoint Collector for Checkpoint SmartCenter using Secure Platform and holding the logs locally on the Checkpoint SmartCenter server
These instructions are assuming you are not using Provider 1 with Checkpoint and that the SmartCenter server is storing logs locally. Check the path to the cpmad_opsec.conf file, if the path is /var/opt/CPsuite-R60/fw1/conf/cpmad_opsec.conf this is SmartCenter.
Use the attached SEC_for_CheckPoint_42.pdf file for the Checkpoint 4.2 and 4.3 collectors for information on configuration Checkpoint SmartCenter.
SSIM Sensor Configuration
Note: This techdoc was created for the Symantec Event Collector 4.3 for Check Point FireWall-1. If you are trying to configure the Symantec Event Collector 4.4 for Check Point LEA please refer to the Quick Reference for this collector.