topic RE: Extreme Management to Checkpoint Firewall Integrations in ExtremeWireless (General)

Extreme Management to Checkpoint Firewall Integrations

Matthew_Perry — Mon, 20 Mar 2017 22:43:00 GMT

I was wondering if anyone was pulling user data from Extreme Management(NAC) into a Checkpoint appliance to Map IP to Users. Any if so how people were doing it. Also if there are any other integrations between the to systems?

RE: Extreme Management to Checkpoint Firewall Integrations

Zdeněk_Pala — Tue, 21 Mar 2017 15:37:00 GMT

Hi.

AFAIK the integration between Extreme Control and CheckPoint is very new. It does exactly what you mentioned => update IP-UserID mapping in CheckPoint.

The opposite integration is generic and should work also = if CheckPoint (anything) send the syslog with specific/configured format to the EMC then endsystem can be blacklisted => quarantined.

Please contact your local Extreme SE = You can get it from the SAI team then.

Regards

Z.

RE: Extreme Management to Checkpoint Firewall Integrations

Matthew_Perry — Tue, 21 Mar 2017 19:26:00 GMT

Thanks, I'll poke my SE.

RE: Extreme Management to Checkpoint Firewall Integrations

Ty_Kolff — Tue, 21 Mar 2017 21:27:00 GMT

I just set this up with a local Checkpoint SE last week. We setup the Checkpoint as a radius server and sent accounting logs to the Checkpoint box and it was then able to tie into Active Directory and pull the user accounts mapped to an IP address.

This was for a customer that was using 802.1x authentication.

RE: Extreme Management to Checkpoint Firewall Integrations

Antonio_Opromol — Thu, 22 Jun 2017 17:59:00 GMT

Hi all,
I'm trying to do a distributed IPS with Extreme Connect module (I'm using EMC version 7.1.1.9 and connect module version 3.02-3) and a Check Point R80.10 firewall.
I've defined the module as below screenshot

and on EMC I receive a snmp v1 trap as follow:

But is trap is not received by the Connect module specific for the Distributed IPS integration...
Has got someone a working scenario with Check Point and the Connect module?

Regards.
Antonio

RE: Extreme Management to Checkpoint Firewall Integrations

Antonio_Opromol — Thu, 22 Jun 2017 18:04:00 GMT

I've forget one screenshot of the snmp trap received

RE: Extreme Management to Checkpoint Firewall Integrations

Antonio_Opromol — Mon, 03 Jul 2017 13:29:00 GMT

Hi, no one has tried this integration?

RE: Extreme Management to Checkpoint Firewall Integrations

Zdeněk_Pala — Mon, 03 Jul 2017 13:29:00 GMT

Hi,

Distributed IPS is working. Video is now available at GitHub. How-To configure it will follow soon.

RE: Extreme Management to Checkpoint Firewall Integrations

Zdeněk_Pala — Thu, 16 Aug 2018 01:22:00 GMT

Hi.
the integration is ready and here is video how it works.

Enjoy.

RE: Extreme Management to Checkpoint Firewall Integrations

Zdeněk_Pala — Thu, 16 Aug 2018 03:29:00 GMT

Documentation of the integration between Extreme Management and Check Point firewall is available here.

RE: Extreme Management to Checkpoint Firewall Integrations

mp2014 — Thu, 16 Aug 2018 03:29:00 GMT

Hi,
nice to see that you did Infoblox IPAM integration script too! I'll try this soon.

RE: Extreme Management to Checkpoint Firewall Integrations

mp2014 — Thu, 16 Aug 2018 03:29:00 GMT

for the infoblox integration - nice work! That was what I was looking for 🙂
One question to this: If i dont want the comment field to get updated (replacing data with "XMC Updated"), what needs to be changed on the python code?

RE: Extreme Management to Checkpoint Firewall Integrations

mp2014 — Thu, 16 Aug 2018 03:29:00 GMT

got it, just missed the right syntax.