https://community.checkpoint.com/t5/Firewall-and-Security-Management/Syslog-data-from-gateway/m-p/51990#M3918 <P>I believe this automatic Cluster NAT changed in R80.x.</P> <P>Is it a problem or a “this is interesting” kind of thing?</P> Fri, 26 Apr 2019 18:45:09 GMT PhoneBoy 2019-04-26T18:45:09Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Syslog-data-from-gateway/m-p/51911#M3910 <P>Hi, I am not sure if this behavior is correct after we upgraded from R77.30 to R80.10 on gateway i observed the firewall is now using the VIP to send the syslog data, From the SMART Dashboard i can see the source IP is being translated to virtual IP.&nbsp;</P><P>&nbsp;</P> Fri, 26 Apr 2019 01:44:02 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Syslog-data-from-gateway/m-p/51911#M3910 Lijo_mathai 2019-04-26T01:44:02Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Syslog-data-from-gateway/m-p/51990#M3918 <P>I believe this automatic Cluster NAT changed in R80.x.</P> <P>Is it a problem or a “this is interesting” kind of thing?</P> Fri, 26 Apr 2019 18:45:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Syslog-data-from-gateway/m-p/51990#M3918 PhoneBoy 2019-04-26T18:45:09Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Syslog-data-from-gateway/m-p/52019#M3923 <P>You can create NAT rule to hide Syslog traffic behind VIP of Cluster.</P> <P>A similar issue (relevant only for R77.30) was discussed within&nbsp;<A href="https://community.checkpoint.com/t5/General-Management-Topics/RADIUS-GAIA-secondary-unit-not-able-to-login/m-p/49574#M8364%2Fjump-to%2Ffirst-unread-message" target="_blank" rel="noopener"><SPAN>RADIUS GAIA secondary unit not able to login</SPAN></A></P> <P><SPAN>It is really true that starting from R80.x all outgoing traffic from cluster members are not automatically translated to the VIP ?</SPAN></P> Sat, 27 Apr 2019 08:45:38 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Syslog-data-from-gateway/m-p/52019#M3923 JozkoMrkvicka 2019-04-27T08:45:38Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Syslog-data-from-gateway/m-p/52033#M3924 On a VRRP cluster you have the option to enable this in the SmartConsole, why is this still different for ClusterXL, I never understood this. Sat, 27 Apr 2019 18:17:57 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Syslog-data-from-gateway/m-p/52033#M3924 Maarten_Sjouw 2019-04-27T18:17:57Z