Checkpoint Log integration with Microsoft Sentinel through Central Management Console

[FahadAhmed]

Hi There,

One of our client has multiple checkpoint firewalls connected to the central management console and was wondering if we can forward logs from the Checkpoint central management console to Microsoft sentinel.

From the already available documentation and data connector available for checkpoint in MS Sentinel, I see only option for firewalls. Not sure if same is applicable for Central management console.

Can one point to the right direction or provide any relevant reference.

Thanks

Fahad.

[#2]

@FahadAhmed I think you would need to check with Checkpoint to see if there is any way to get the data out of the console.  If it can, then it depends on how the data can be extracted.  If you are lucky, then it is just a matter of setting it up to go to a SysLog/CEF server.  If not, it may take some custom code to get the data.