topic Re: VSX FW Logs not coming in Tracker of CMA as well as CLM in Firewall and Security Management

VSX FW Logs not coming in Tracker of CMA as well as CLM

sunilspj — Tue, 05 May 2020 16:06:03 GMT

VS0 has 257/tcp established connection for logging.

Tried FW reboot, CLM restart, no progress.

'fw log' command output on FW given below messages:-

22:50:38 ctl >daemon sys_message::Error: FW-1 log formats problem.;product:VPN-1 & FireWall-1;product_family:Network

22:50:38 ctl >daemon sys_message::Error: FW-1 failed to generate the log record.;product:VPN-1 & FireWall-1;product_family:Network

22:50:38 ctl >daemon sys_message::Error: FW-1 log formats problem.;product:VPN-1 & FireWall-1;product_family:Network

Quick suggestions will be highly appreciated.

Re: VSX FW Logs not coming in Tracker of CMA as well as CLM

PhoneBoy — Thu, 07 May 2020 03:28:30 GMT

Maybe: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk117288&partition=Advanced&product=SmartView

Re: VSX FW Logs not coming in Tracker of CMA as well as CLM

sunilspj — Thu, 07 May 2020 12:37:37 GMT

Thanks, it worked.
Now am getting logs in tracker.

But bad news is that after reboot, cluster status is Down for that modified FW.
"cphaprob list" showing problem for routed device.
[Expert@FW:0]# cphaprob list
Registered Devices:
Device Name: routed
Registration number: 3
Timeout: none
Current state: problem
Time since last report: 700.6 sec

Re: VSX FW Logs not coming in Tracker of CMA as well as CLM

sunilspj — Thu, 07 May 2020 15:12:40 GMT

Issue resolved, Dynamic routing configured in VS0 mistakenly.

Re: VSX FW Logs not coming in Tracker of CMA as well as CLM

sunilspj — Fri, 08 May 2020 03:44:28 GMT

VSX FW showing logs now but I have 1 VS (virtual FW) in it.
That VS is not showing any log, giving same log format error.
What can be done here for VS ?

Re: VSX FW Logs not coming in Tracker of CMA as well as CLM

PhoneBoy — Sun, 10 May 2020 23:08:07 GMT

Best to get with the TAC here.