Checkpoint LEA datasource is not working with SpanVA version 1.15.3.160

Products

• Web Protection Suite

Issue/Introduction

LEA datasource is not working with SpanVA version 1.15.3.160 with Oracle OS. It will show an error like this:

"Failed to pull opsec app certificate for server: <IP address> and app: <App name>."

 

Cause

Checkpoint LEA is not supported on the Oracle version of SpanVA, version 1.15.3.160.

Resolution

CloudSOC development is working on an updated way to ingest Checkpoint logs without using LEA.