topic Re: CPLog to Syslog Install Conflict (R77.30) in General Topics

CPLog to Syslog Install Conflict (R77.30)

Wyman — Wed, 25 Sep 2019 12:08:46 GMT

Hi all. We need to allow our firewalls to forward logs to our syslog server. The latest hotfix installed on the management server is R77.30 Take 342.

When I tried to install Check_Point_CPLogToSyslog_R77_30_Jumbo_HF_T216.tgz it doesn't install because there is a conflict with the Jumbo Hotfix Accumulator for R77.30 Take 117 (installed as part of Take 342)

Would uninstalling Take 342, installing the syslog hotfix, then reinstalling 342 be possible?

Re: CPLog to Syslog Install Conflict (R77.30)

Wyman — Wed, 25 Sep 2019 13:15:33 GMT

My mistake - I found the Syslog option under Servers and OPSEC Applications.

Re: CPLog to Syslog Install Conflict (R77.30)

Chris_Atkinson — Wed, 25 Sep 2019 14:21:29 GMT

When able please explore your options for upgrading to R80.20 or above with support for LogExporter.

Note R77.30 is End of Support after this month.

Re: CPLog to Syslog Install Conflict (R77.30)

PhoneBoy — Wed, 25 Sep 2019 17:26:29 GMT

Log Exporter replaces CPLogToSyslog and should be available for R77.30.

Re: CPLog to Syslog Install Conflict (R77.30)

Wyman — Fri, 27 Sep 2019 10:44:53 GMT

Hi Phoneboy,

Thanks for that. Just to confirm, our 3rd party service provider says that the syslog port from CheckPoint is 10527. I guess I can just create a NAT rule that will convert from UDP 514 to 10527?

Re: CPLog to Syslog Install Conflict (R77.30)

PhoneBoy — Fri, 27 Sep 2019 14:27:39 GMT

You should be able to send syslog to any pory (514 is the default).
Again, I would be doing this with Log Exporter and not CPLogToSyslog.
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk12232