topic Security Management Portal Service Domain log contains GW log? in Spark Firewall (SMB)

Security Management Portal Service Domain log contains GW log?

sean_yeung — Fri, 05 Mar 2021 15:06:28 GMT

Hi all,

I want to forward gateway log to external syslog server.

Somehow at security management portal, the setting named "forward SMP system logs to an external Syslog server" seems only forward service domain's syslog rather than gateway's log.

Can anyone please clarify this is the correct place to configure.

Thanks.

Re: Security Management Portal Service Domain log contains GW log?

PhoneBoy — Mon, 08 Mar 2021 02:35:29 GMT

Security logs and OS logs are different things.
Not sure if you can do this for an SMP-managed device, but I believe the device itself can send logs via syslog (at least with the latest R80.20.x firmware).
Check Logs & Monitoring > Logs > External Log Servers.

Re: Security Management Portal Service Domain log contains GW log?

Ted_Serreyn — Sat, 17 Apr 2021 19:19:19 GMT

This can be done still with SMP managed devices. Interesting enough it appears to be exactly how checkpoint sends its logs to the SMP cloud servers.

If you wanted to manage centrally, it would need to be via cli commands as I don't see where we could configure it centrally in SMP 12.30