CheckPoint Firewall Block APP

Alerting

Hi everyone,

so I´m using CheckPoint Firewall Block app to block some ip's.
If I try to block them manually like this:

I'm getting this:

The IP is being blocked.

However, when I'm configuring an alert condition to block it automatically :

I get this:

so, the IP is not being blocked.

Someone had the same problem and know how to solve it?

Get Updates on the Splunk Community!

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...