Skip to main content

How to Integrate Checkpoint Harmony

This guide will walk you through how to integrate Checkpoint Harmony with the Defense.com SIEM platform.

Kara Crimson avatar
Written by Kara Crimson
Updated over a week ago

This integration is available on our Advanced and Enterprise packages.

Before you get started

This integration requires us to configure a collector on the edge of our network to receive your log data directly from Checkpoint Harmony. Before you get started, please reach out to our Technical Support team and make them aware that you're planning on setting up this integration.

They will then deploy the collector required for this and provide you with the IP address and certificates mentioned later in this guide. The certificates will come in an attachment on the support ticket containing 2 files: A *.pem Certificate Authority certificate and a *.p12 format client certificate.

Configuring Checkpoint Harmony

  1. Log into the Harmony Endpoint for Checkpoint Harmony.

  2. Go to Endpoint Settings and click Add.

  3. The New Logging Service window will open:

    1. Under Name select a name for the service eg. Defense logs.

    2. Under IP address enter the IP address of your edge collector the support team has provided.

    3. Under Protocol select UDP.

    4. Under Format select Syslog.

    5. Under Port select 514.

    6. Under TLS/SSL select the checkbox and upload the certificates provided by the support team.

  4. Save your changes.

Confirming log flow

Once the above steps are complete, your device will now ship logs to our SIEM platform via your collector. You can confirm logs are successfully reaching our SIEM by either.

  1. Navigating to the Log Search feature in Defense.com by browsing to SIEM > Log Search and then filtering the logs by type:"syslog".

  2. Reaching out to our Technical Support team, who'll be able to check and confirm this for you.

And that's it! You've successfully integrated Checkpoint Harmony🎉


​

Did this answer your question?