Management of Check Point Log Sources

You define the LEA server and CPMI protocols using the LEA Servers tab.

If the firewall or interface for the LEA server is on a different Check Point log source than the LEA server, you must specify it using the Firewalls or Interfaces tabs. The Firewalls or Interfaces tabs are accessible only after you add at least one LEA server to the appliance.

The LEA Servers tab lists the LEA servers defined on the appliance. Using this tab you can:

  • Add new LEA servers
  • Modify existing LEA servers
  • Delete existing LEA servers
  • View LEA, CPMI, and LEA server status
  • Start or stop LEA servers
  • Manually propagate LEA server definitions downstream (all new and updated LEA servers are automatically propagated after their properties are set)

The Firewalls or Interfaces tabs similarly let you add, modify, delete, and view firewalls and interfaces.

When modifying an LEA server, firewall, or interface, you have access to the same parameters and options. Using this tab, you can perform the following:

  • To add a new LEA server to the appliance, click Add New. The Add LEA Server tab appears. For more information, see Adding an LEA Server.
  • To modify an existing LEA server on the appliance, click the server's Name. Make the necessary changes using the Modify LEA Server screen and click Update.
  • To remove an LEA server from the appliance, check the server's check box and then click Remove.
  • To start an LEA server, in its row click .
  • To stop a running LEA server, in its row click .
  • To refresh the LEA Servers tab, click Refresh.
  • To manually propagate LEA server definitions to downstream syslog receivers, click .