Cisco CS-MARS-20-K9 - Security MARS 20 User Manual page 163

Chapter 4 Configuring Firewall Devices
If you have enabled CPMI discovery, the service condition must include CMPI. To enable the log access,
the service list must include FW1_lea.
Verify that the security policies are set to log.
Step 3
The Track column of each rule should display the Log action. To enable logging, right-click the Track
field of a rule and select Log on the shortcut menu.
Once you have defined the security policies that enable traffic flows between the Check Point and MARS
Step 4
components, select Policy > Install on the main menu.
In the Install Policy dialog box, verify the Advanced Security check box is selected for each selected
Step 5
installation target.
The target devices should be those firewalls that reside between the Check Point components and the
MARS Appliance.
Click OK to install the policies on the selected devices.
Step 6
Result: The security policies on the target firewall devices are updated, enabling CPMI and LEA traffic
flows between the Check Point components and the MARS Appliance.
Using the Check Point log viewer, you can verify that the policies were installed successfully.
Tip
78-17020-01
User Guide for Cisco Security MARS Local Controller
Check Point Devices
4-35