There has been a change to the IP addresses that Check Point sends events for SIEM/SOAR Event Forwarding in the following regions:
UAE: 51.112.39.93
UK: 3.9.211.100
India: 15.207.123.24
If you receive these logs through a firewall or other network level packet filter, then please make sure to update your policies/ACL’s to reflect this change of source sender IP.
More information can be found here.
Follow John Tammaro on LinkedIn for more Tech Tips and insights.