CheckPoint Firewall Block APP

Alerting

Hi everyone,

so I´m using CheckPoint Firewall Block app to block some ip's.
If I try to block them manually like this:

I'm getting this:

The IP is being blocked.

However, when I'm configuring an alert condition to block it automatically :

I get this:

so, the IP is not being blocked.

Someone had the same problem and know how to solve it?

Get Updates on the Splunk Community!

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...

Join the Conversation