Check Point Harmony SASE

SamurAI [Local] Collector	SamurAI [Cloud] Collector

This guide describes the steps required to configure Check Point Harmony SASE to send events to a Samurai Cloud Collector.

Prerequisites

Ensure that a Samurai Cloud Collector of type Splunk HTTP Event Collector (HEC) has been deployed via the SamurAI Portal. 

• Guide available here

If you are planning to reuse an already deployed Samurai HEC Cloud Collector you will need (displayed only upon creation):

• API URL
• Token

From the Check Point Harmony SASE Management Console

Follow the Check Point documentation:

• Configuring the Splunk Integration in the Harmony SASE Administrator Portal

When following the documentation, please use the following:

• Enter these:
  • Splunk HEC Host: The Samurai Cloud Collector API URL
  • HEC Port: 443
  • Protocol: HTTPS
  • Verify SSL Certificate: Enabled
  • HEC URI: (value is automatically populated)
  • Authentication Token: The SamurAI Cloud Collector token

Our Integration guide was accurate at the time of writing but vendors change things frequently! If you find errors or anything is outdated, let us know by raising a request in the SamurAI MDR Portal and we shall get it updated.