Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: InfoSec Handlers Diary Blog - SANS Internet Storm Center InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Dshield submissions aren't working if you have a Checkpoint Firewall

Published: 2009-02-19
Last Updated: 2009-02-19 19:34:14 UTC
by Joel Esler (Version: 1)
1 comment(s)

Checkpoint Firewalls have a feature to be able submit logs directly to Dshield.  Well...  they are supposed to.

Turns out there is an issue with Checkpoint's submission process, and (as far as I know) you will not get any indication that you are not submitting logs to us.  We appreciate it when our readers submit logs into Dshield, and thusly the Internet Storm Center.  If you are trying to submit logs to us, and would like it to be native, that'd be great, however, right now, the feature isn't working. 

So, in the meantime while several of our readers have called Checkpoint support to ask that they fix this issue, please check out http://www.dshield.org/howto.html in order to submit your logs.  There is a module ready for Checkpoint, outside of the actual firewall software itself, and we'd love to have your logs.  Thanks!

-- Joel Esler http://www.joelesler.net

Keywords:
1 comment(s)
Diary Archives