Alerting

CheckPoint Firewall Block APP

dteixeira98
Engager

Hi everyone,

so I´m using CheckPoint Firewall Block app to block some ip's. 
If I try to block them manually like this:

dteixeira98_0-1631872888694.png

I'm getting this:

dteixeira98_1-1631872967103.png

The IP is being blocked.

However, when I'm configuring an alert condition to block it automatically :

dteixeira98_2-1631873145460.png

I get this:

dteixeira98_5-1631873289142.png

so, the IP is not being blocked.

 

Someone had the same problem and know how to solve it?

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...

Data Management Digest – January 2026

Welcome to the January 2026 edition of Data Management Digest! Welcome to the January 2026 edition of Data ...

Splunk SOAR Now Available on Google Cloud Platform

We’re excited to announce that Splunk SOAR is now natively available as a SaaS solution on Google Cloud ...