We implemented CheckPoint and ArcSight integration (via OPSEC server, clear connection). What logs will be sent to ArcSight? For example, we try to log in via Endpoint Security VPN. In CheckPoint logs we see log in and log out events, but in ArcSight we see only log out events. Why?