Splunk SOAR

Problem with checkpoint and phantom

manrodriguez
Engager

Hi guys!!

I have to ask the following question about an integration with phantom, I have raised a 7730 checkpoint and I have connectivity between phantom and checkpoint. The problem lies when I try to integrate it, it throws me the following message.

"Testing Connectivity
App 'Check Point Firewall' started successfully (id: 1563368756969) on asset: 'cplab'(id: 25)
Loaded action execution configuration
Using base URL 'https://192.168.28.121/web_api/'
Connecting to https://192.168.28.121/web_api/...
Could not connect to Check Point. Connectivity test failed. No action executions found."

If someone have a feedback about this issue i will really appreciate.

Regards!!!!!

Labels (2)
Tags (2)
0 Karma

cblumer_splunk
Splunk Employee
Splunk Employee

It's recommended to check the logs on the Phantom host when there are issues with connectivity for an integration:
/var/log/phantom/spawn.log
/var/log/phantom/wsgi.log

A netcat test can also be executed from the Phantom host to confirm network connectivity:
sudo nc -vz 192.168.28.121 443

Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...