---
title: "Checkpoint Next Generation Firewall"
slug: "checkpoint-next-generation-firewall"
updated: 2026-01-28T13:12:21Z
published: 2026-01-28T13:12:21Z
canonical: "docs.databee.buzz/checkpoint-next-generation-firewall"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt
> Use this file to discover all available pages before exploring further.

# Checkpoint Next Generation Firewall

Checkpoint NGFW builds on the capabilities of a traditional firewall by incorporating additional features. For example, an NGFW operates at the application layer of the TCP/IP stack to apply intrusion prevention system (IPS), antimalware, sandboxing and other protections. These functions allow an NGFW to identify and block advanced threats before they pose a risk to corporate systems. For more information on Checkpoint Next Generation Firewall, click [here.](https://www.checkpoint.com/cyber-hub/network-security/what-is-next-generation-firewall-ngfw/)

**Integration Method:** Data Collector (syslog)

**Tables**: Network Activity (4001), Detection Finding (2004)

This integration supports the following events.

| **Event** | **Description** |
| --- | --- |
| URL Filtering Activity | Provides details about the URL filtering operations. |
| IPS Activity | Provides details about the Intrusion Prevention System activities. |
| Antivirus Activity | Provides details about the Antivirus operations. |
| Malware Activity | Provides details about the anti-malware operations. |

This integration supports the following versions.

| Checkpoint Version Tested | R81.20 |
| --- | --- |

## Prerequisites

- Access to login into Checkpoint backend environment as an administrator.
- The user should have a [compatible version](https://docs.databee.buzz/docs/data-collector#prerequisites) of the system in which we can configure the data collector.
- The user should have access to the DataBee console.

## Configuration Overview

1. [Configure the Data Collector](/user-manual/docs/checkpoint-next-generation-firewall#data-collector-configuration).
2. Configure [syslog on Checkpoint Machine](/user-manual/docs/checkpoint-next-generation-firewall#checkpoint-configuration).
3. Configure [Checkpoint New Generation Firewall feed](/user-manual/docs/checkpoint-next-generation-firewall#databee-configuration) in DataBee Console.

## Data Collector Configuration

1. To install Data Collector, please follow the steps mentioned [here](https://docs.databee.buzz/docs/data-collector#configure-data-collector-in-databee).
2. Verify that the required port (for example, port 514) is open and configured to accept incoming data from the Checkpoint server.

## Checkpoint Configuration

1. Login to the Checkpoint backend as an administrator. ex: *ssh admin@1.2.3.4*
2. Login to the expert mode. *expert*
3. Modify the below command and execute in the shell,

*cp_log_export add name {Jobname} target-server {IP} target-port {Port} protocol tcp format json*

Jobname - Can be name of your choice.

IP - The IP of the machine where the Data Collector is installed.

Port - The Port which was opened during [Data Collector Configuration](/user-manual/docs/data-collector).

sample command - *cp_log_export add name comcast1 target-server 1.2.5.8 target-port 514 protocol tcp format json*
4. Execute the below command to check the configuration. *cp_log_export show*

## DataBee Configuration

1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/checkpoint-next-generation-firewall-image-m4cqpkoz.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A21%3A19Z&se=2026-10-30T13%3A21%3A19Z&sr=c&sp=r&sig=THLyVlEZK07eieN5mbSla2S9t3WTSSEPcXwbOqcQZiw%3D)
2. Search for the **Checkpoint Next Generation Firewall** and click it as shown below. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/checkpoint-next-generation-firewall-image-g1m9m7p3.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A21%3A19Z&se=2026-10-30T13%3A21%3A19Z&sr=c&sp=r&sig=THLyVlEZK07eieN5mbSla2S9t3WTSSEPcXwbOqcQZiw%3D)
3. Click on the **Data Collector** for collection method. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/checkpoint-next-generation-firewall-image-ov988u6k.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A21%3A19Z&se=2026-10-30T13%3A21%3A19Z&sr=c&sp=r&sig=THLyVlEZK07eieN5mbSla2S9t3WTSSEPcXwbOqcQZiw%3D)
4. Click on the **Syslog** option. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/checkpoint-next-generation-firewall-image-c7dchh06.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A21%3A19Z&se=2026-10-30T13%3A21%3A19Z&sr=c&sp=r&sig=THLyVlEZK07eieN5mbSla2S9t3WTSSEPcXwbOqcQZiw%3D)
5. Enter feed contact information then select the [data collector](/user-manual/docs/data-collector) created earlier and scroll down. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/checkpoint-next-generation-firewall-image-af7dehap.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A21%3A19Z&se=2026-10-30T13%3A21%3A19Z&sr=c&sp=r&sig=THLyVlEZK07eieN5mbSla2S9t3WTSSEPcXwbOqcQZiw%3D)
6. In the configuration page, confirm the following:

![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/checkpoint-next-generation-firewall-image-7comlncr.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A21%3A19Z&se=2026-10-30T13%3A21%3A19Z&sr=c&sp=r&sig=THLyVlEZK07eieN5mbSla2S9t3WTSSEPcXwbOqcQZiw%3D)
  - Select the ‘format’ as **json** from the dropdown.
  - Select the ‘Mode’ as **TCP** from the dropdown.
  - Fill the ‘Port’ with the port configured during the syslog configuration in the host machine.
7. Click **Submit**.

## Troubleshooting Tips

- If you encounter any issues regarding log forwarding, refer to the [DataBee troubleshooting article](https://docs.databee.buzz/docs/troubleshooting) for detailed guidance.