This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Check Point Harmony SASE

    SamurAI [Local] CollectorSamurAI [Cloud] Collector
    Picture1.svg

    This guide describes the steps required to configure Check Point Harmony SASE to send events to a Samurai Cloud Collector.

    Prerequisites

    Ensure that a Samurai Cloud Collector of type Splunk HTTP Event Collector (HEC) has been deployed via the SamurAI Portal. 

    If you are planning to reuse an already deployed Samurai HEC Cloud Collector you will need (displayed only upon creation):

    • API URL
    • Token

    From the Check Point Harmony SASE Management Console

    Follow the Check Point documentation:

    When following the documentation, please use the following:

    • Enter these:
      • Splunk HEC Host: The Samurai Cloud Collector API URL
      • HEC Port: 443
      • Protocol: HTTPS
      • Verify SSL Certificate: Enabled
      • HEC URI: (value is automatically populated)
      • Authentication Token: The SamurAI Cloud Collector token

    Our Integration guide was accurate at the time of writing but vendors change things frequently! If you find errors or anything is outdated, let us know by raising a request in the SamurAI MDR Portal and we shall get it updated.