OPSEC connector session error

kytestmi

Hi,

I created OPSEC connector

When I started it, internal warning appears immediately and no event is collected.

Can you give me a hand?

Thanks in advance

Find more posts tagged with

security_information_and_event_manangement

siem

hipaa

Accepted answers

All comments

curtisi

I've used these steps to get CheckPoint working in the past:

http://knowledgebase.solarwinds.com/kb/questions/3158/Integrating+Check+Point+with+SolarWinds+LEM

So, it appears that you have the Opsec Application setup correctly based on the screenshots. Did you set the one-time password in the Communication screen under the Opsec Application? What is the Trust State when you initialize the application?

jefferywang

I have same problem of this.

any update for the issue.

I also following CheckPoint KB:sk103855, but unresolved

thanks!

btw, LEM using 6.1.0

curtisi

I just did a Checkpoint config, and the issue we ran into was that the policy had not been installed/pushed to the Checkpoint cluster. Have you saved all your config settings on Checkpoint?

jefferywang

Hi Curtisi

yeah! I sure did install policy on Checkpoint.

Environment have two production devices. for management and gateway.

The OPSEC build on management server.

And, I done successful open Checkpoint NG LEA connector.

Image 011.png

but I got same error message

Image 012.png

Does I need to setup the send syslog from management or gateway?

Thanks!