topic Logs from TE SG on TE Appliance managed by a different MGMT in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Logs-from-TE-SG-on-TE-Appliance-managed-by-a-different-MGMT/m-p/10613#M13596 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P>I have the question about TE logs. There is a such configuration (sk102309 section 10) : TE Appliance R77.30 JHF Take 338 engine 57.990004002 is managed MGMT-TE R80.20. GWS that send files for emulation to TE Appliance are manager anothers MGMT. In SmartLog on MGMT-TE R80.20 I don't see Threat Emulation logs. Is it by design or something wrong in a configuration?</P><P>tecli s s<BR />General Information:<BR />--------------------<BR />Scanned files: 5 264</P><P>Files destined for Local Emulation:<BR />-----------------------------------<BR />Scanned files locally: 5 264</P></BODY></HTML> Thu, 29 Nov 2018 07:52:07 GMT Andrey_Ganichev 2018-11-29T07:52:07Z Logs from TE SG on TE Appliance managed by a different MGMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Logs-from-TE-SG-on-TE-Appliance-managed-by-a-different-MGMT/m-p/10613#M13596 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P>I have the question about TE logs. There is a such configuration (sk102309 section 10) : TE Appliance R77.30 JHF Take 338 engine 57.990004002 is managed MGMT-TE R80.20. GWS that send files for emulation to TE Appliance are manager anothers MGMT. In SmartLog on MGMT-TE R80.20 I don't see Threat Emulation logs. Is it by design or something wrong in a configuration?</P><P>tecli s s<BR />General Information:<BR />--------------------<BR />Scanned files: 5 264</P><P>Files destined for Local Emulation:<BR />-----------------------------------<BR />Scanned files locally: 5 264</P></BODY></HTML> Thu, 29 Nov 2018 07:52:07 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Logs-from-TE-SG-on-TE-Appliance-managed-by-a-different-MGMT/m-p/10613#M13596 Andrey_Ganichev 2018-11-29T07:52:07Z Re: Logs from TE SG on TE Appliance managed by a different MGMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Logs-from-TE-SG-on-TE-Appliance-managed-by-a-different-MGMT/m-p/10614#M13597 <HTML><HEAD></HEAD><BODY><P>I assume the logs would go to the log server it is configured to go to (i.e. by the other management).</P></BODY></HTML> Fri, 30 Nov 2018 21:48:23 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Logs-from-TE-SG-on-TE-Appliance-managed-by-a-different-MGMT/m-p/10614#M13597 PhoneBoy 2018-11-30T21:48:23Z Re: Logs from TE SG on TE Appliance managed by a different MGMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Logs-from-TE-SG-on-TE-Appliance-managed-by-a-different-MGMT/m-p/10615#M13598 <HTML><HEAD></HEAD><BODY><P>On the other mamangement (manages the GW) I see TE logs. <BR />tecli advanced remote emulator logs enable on GW must enable the logs on TE MGMT I think..<BR />It seems I see only logs with malisious if detected.</P></BODY></HTML> Mon, 03 Dec 2018 13:23:39 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Logs-from-TE-SG-on-TE-Appliance-managed-by-a-different-MGMT/m-p/10615#M13598 Andrey_Ganichev 2018-12-03T13:23:39Z Re: Logs from TE SG on TE Appliance managed by a different MGMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Logs-from-TE-SG-on-TE-Appliance-managed-by-a-different-MGMT/m-p/10616#M13599 <HTML><HEAD></HEAD><BODY><P>In your case by default if using two dedicated Mgmts logs should be created on both log servers.</P><P>If you have a distributed setup with one Mgmt (so GW and SB appliance in one Mgmt) you would only get one log from the GW.</P><P></P><P>Regards Thomas</P></BODY></HTML> Wed, 05 Dec 2018 09:32:29 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Logs-from-TE-SG-on-TE-Appliance-managed-by-a-different-MGMT/m-p/10616#M13599 Thomas_Werner 2018-12-05T09:32:29Z