Check Point Management Stations

You can add some or all Check Point devices that are managed by a single MDS, CMA or SmartConsole. SIP detects all of the associated firewalls, management servers and log servers, and adds them for you at one time. The management station must be installed before the supported devices.

Check Point Management Stations have the ability to push/commit a Security Policy and/or NAT Policy to multiple firewalls. There could be rules on the Security Policy and/or NAT Policy that are 'installed on' certain firewalls or clusters. Normalization occurs on the 'installed' rules for firewall devices and skips the rules that are not.

The IP directory used for SIP by the data collector is the IP address of log directory that firewalls log to.