OPSEC
Interface Support Across Check Point's
Line of Products
Management Products
OPSEC Interfaces: ELA (not supported by Edge device), LEA, AMON, CPMI, CPRA, SmartUpdate, SAM Proxy
CP Products: SmartCenter, all Smart GUI applications, Provider-1, SiteManager-1 , SmartLSM
Enforcement Products
OPSEC Interfaces: UAA (with Policy Server), CVP, UFP, SAM, HA/LB, SecureXL
CP Products: VPN-1/FireWall-1, Check Point Express, SecureServer
Desktop Products
OPSEC Interfaces: SCV, SAA
CP Products: SecureClient, SecuRemote
Exceptions
- VPN-1 Edge and Safe@ devices can only send logs to SmartCenter and be fetched through LEA.
- CPMI and CPRA supported on SmartCenter
(can create and query devices but can't push policy to VPN-1 Edge systems) - FireWall-1 GX doesn't support UAA
- VPN-1/FireWall-1 VSX doesn't support SAM or SecurityServers (CVP, UFP)
- Safe@ Products supports only CVP and UFP
- VPN-1 Edge doesn't support SAM, UAA, ELA, SXL or 3rd Party HA/LB
- SCV not supported by SecuRemote (only SecureClient)
- InterSpect 1.5 supports LEA, SAM and ELA only
- Provider-1 supports OPSEC API's at the CMA and CLM level
(MDS connections are NOT supported)