Configuring OPSEC for Nortel Switched Firewalls

This method ensures the IBM QRadar Nortel Switched Firewall 6000 DSM accepts Check Point FireWall-1 events by using OPSEC.

About this task

Depending on your Operating System, the procedures for the Check Point SmartCenter Server can vary. The following procedures are based on the Check Point SecurePlatform Operating system.

To enable Nortel Switched Firewall and QRadar integration, take the following steps:

Procedure

  1. Reconfigure Check Point SmartCenter Server. See Reconfiguring the Check Point SmartCenter Server.
  2. Configure the OPSEC LEA protocol in QRadar.

    To configure QRadar to receive events from a Check Point SmartCenter Server that uses OPSEC LEA, you must select the LEA option from the Protocol Configuration list when you configure LEA.

  3. Configure the log source in QRadar.

    To configure QRadar to receive events from a Nortel Switched Firewall 6000 device using OPSEC you must select the Nortel Switched Firewall 6000 option from the Log Source Type list.