<html lang="en">
<body>

	<p>
	<b>[OOTB] Checkpoint syslog. Version 1</b><br>
   	Changelog:<br>
	Support of events from the Checkpoint (version R81) have been added.<br>
	The normalizer name has been changed from "[OOTB] Checkpoint Syslog basic" to "[OOTB] Checkpoint syslog".<br>
	Type of the main normalizer has been changed to "regexp".<br>
	New extra normalizers have been added:
		<ul>
			<li>VPN-1 & FireWall-1</li>
			<li>Identity Awareness KV Parser</li>
			<li>SmartDefense KV Parser</li>
			<li>Application Control KV Parser</li>
			<li>Connectra KV Parser</li>
			<li>Anti Malware KV Parser</li>
			<li>Connectra(+)VPN-1 & FireWall-1 KV Parser</li>
			<li>Empty ProductName KV Parser</li>
		</ul>
	New event mappings have been added to the main normalizer:
		<ul>
			<li>Event field "ProductName" to the KUMA field "DeviceProduct"</li>
			<li>Event field "ProductFamily" to the KUMA field "DeviceFacility"</li>
			<li>Event field "sport_svc" to the KUMA field "SourcePort"</li>
			<li>Event field "svc" to the KUMA field "DestinationPort"</li>
			<li>Event field "Action" to the KUMA field "DeviceAction"</li>
			<li>Event field "session_uid" to the KUMA field "ExternalID"</li>
		</ul>
	New event enrichments have been added to the main normalizer:
		<ul>	
			<li>Enrichment type "event" to the KUMA field "DeviceAction"</li>
			<li>Enrichment type "dictionary" to the KUMA field "TransportProtocol"</li>
		</ul>
	Other minor improvements.<br>	
	</p>

</body>
</html>