Check Point FW1/VPN1

Use Check Point FW1/VPN1 data with Cortex XDR.

You can configure collecting Check Point FW1/VPN1 logs using a Broker VM Syslog Collector applet or with a content pack integration:

Check Point FW1/VPN1 vendor	Description
Syslog Collector applet overview	If you use Check Point FW1/VPN1 firewalls, you can forward Check Point firewall logs to Cortex XDR using the Broker VM Syslog Collector applet in a CEF format.
Link to Syslog Collector applet instructions	Ingest logs from Check Point firewalls