Checkpoint XDR syslog integration

[N.Team544522]

Dear all,

we have checkpoint infinity xd solution and we need to integrate it with palo alto ngfw (820 model)

checkpoint side give us the guidline and also we made online meeting to check configurations. there are:

1. valid checkpoint certificates

2. public ip of syslog server

3. we create the policy to permit all traffic to that public ip

4. we tag the log forwarding (only threat traffic) to specific policy

5. we permit the public ip for management interface

6. we are able to see the nat traffic (palo alto mgmt ip-->our public ip-->xdr public ip)

7. we can ping and traceroute the xdr public ip

8. we are able to telnet the port on checkpoint side

but the checkpoint side don't get ANY traffic

maybe someone faced with such case. is there any ideas what we can to check ?