[Sentinel] The Check_Point_Firewall_4_LEA_520 won't connect to the Check Point service

  • 3713085
  • 10-Sep-2007
  • 26-Apr-2012

Environment

Sentinel 5.1.3
Check Point NGX High-End Security Product Suite (R61 or R65)
Check Point Provider-1 (R61 or R65)

Situation

The Check Point Firewall 4 LEA 520 collector will not connect to the Check Point Provider-1 R61 software.
The collector is configured to use a clear text communication method.
This method worked in previous versions of the Check Point Provider-1 software.
Newer versions of the Check Point Provider-1 software does not allow for clear text communications.

Resolution

The Check Point Provider-1 software does not allow for clear text communications. Please configure your Check Point LEA client ( Check Point Firewall 4 LEA 520 collector ) for"SSL with Certificate Communication". There is a section in the Check_Point_Firewall_4_LEA_520.pdf that comes with the collector that describes how to configure the LEA client in SSL mode. Please refer to the documentation for the configuration settings.