topic Re: Details regarding Logs and Track (Gateway General Properties) in Firewall and Security Management

Details regarding Logs and Track (Gateway General Properties)

Chinmaya_Naik — Thu, 19 May 2022 13:19:34 GMT

Hi Checkmates Team,

Please help me to give details on below yellow mark in snapshot.

@Chinmaya_Naik

Re: Details regarding Logs and Track (Gateway General Properties)

G_W_Albrecht — Thu, 19 May 2022 14:03:47 GMT

sk62082: How to allow TCP/UDP packets with IP options through Check Point Security Gateway

skI1915: Configuring Dynamic Objects

log every authenticated http connection speaks for itself, i thing...

Re: Details regarding Logs and Track (Gateway General Properties)

Chinmaya_Naik — Thu, 26 May 2022 03:34:01 GMT

Hi @G_W_Albrecht

Thanks for the update.

I need clarity on below point

1. log every authenticated http connection

2. SLA violation

@Chinmaya_Naik

Re: Details regarding Logs and Track (Gateway General Properties)

Sorin_Gogean — Thu, 26 May 2022 14:51:11 GMT

hey,

Not sure if they are still actual, but here is what I found:

"Log every authenticated HTTP connection: In many cases, loading a Web page requires more than one connection to be opened. If this option is checked, each and every one of those connections will be logged instead of just the first one to a particular site."

"SLA violation: If a virtual link is defined and the availability parameters defined for that link are not met, that is, the virtual link does not meet the established Service Level Agreement (SLA), this activity generates the appropriate log or alert entry."

Thank you,

PS: from here

Re: Details regarding Logs and Track (Gateway General Properties)

Chris_Atkinson — Fri, 27 May 2022 06:25:57 GMT

SLA violation specifies the action to be taken when an SLA violation occurs, as defined in the Virtual Links window. Per sk106085 in older versions look here: SmartView Monitor -> Virtual Links...

Where Check Point is configured as a proxy, Log every authenticated HTTP connection specifies that additional log entries be generated. From what I recall this causes both the inbound & outbound connection to/from the "proxy" to be logged.

Re: Details regarding Logs and Track (Gateway General Properties)

NancySanchez18 — Wed, 26 Jun 2024 19:20:53 GMT

Hello can you help me with the information about that logs configuration please: IP Options drops and Dynamic object resolution failure