SIEM / SOAR Integration

Email Security allows you to integrate with multiple Security Information and Event Management (SIEM) platforms and Cortex XSOAR by Palo Alto Networks.

Encryption - For SIEM, unless configured otherwise, all events are forwarded over HTTPS.

Sending events on malicious activity to any supported SIEM platform is included in all Email Security packages.

Note:

Sending clean events to a SIEM platform has an additional cost and requires an additional license. To purchase the license, contact Check Point Sales or Check Point Support.

Source IP Address

Email Security can be deployed in one of several geographic regions. The security events get forwarded from a unique static IP for each region.

The static IP address for different regions:

  • Australia - 52.63.125.59

  • Canada - 35.182.23.24

  • Europe - 54.247.106.52

  • India * - 15.207.123.24

  • United Arab Emirates * - 51.112.39.93

  • United Kingdom * - 3.9.211.100

  • United States - 34.192.247.192