Splunk Add-on for Check Point OPSEC LEA: Unable to add LEA connection with error "Unauthorized client for the requested action..."

[gpittmon]

When trying to add a new (CMA) connection, I am getting this error:

REST ERROR[403]: Unauthorized client for the requested action - Client is not authorized to perform requested action

What am I missing?

[mreynov_splunk]

What version of the addon are you working with?
Did you do the pull cert step?

[gpittmon]

Hello mreynov, we are running Splunk version 6.3.1. The Splunk Add-on for Check Point OPSEC LEA is v 4.0.

[mreynov_splunk]

You need to get the cert from OPSEC to establish SIC.