OPSEC/LEA log source parameters for Nokia FireWall

If QRadar does not automatically detect the log source, add a Nokia FireWall log source on the QRadar Console by using the OPSEC/LEA protocol.

When using the OPSEC/LEA protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect OPSEC/LEA events from a Nokia FireWall:

Table 1. OPSEC/LEA log source parameters for the Nokia FireWall DSM
Parameter	Value
Log Source type	Check Point FireWall-1
Protocol Configuration	OPSEC/LEA
Log Source Identifier	Type an IP address, host name, or name to identify the event source. IP addresses or host names are better because they enable QRadar to match a log file to a unique event source.

For a complete list of OPSEC/LEA protocol parameters and their values, see OPSEC/LEA protocol configuration options.