topic Re: Get Logs & Monitor Issue with a Central Management 1400 Appliance in Spark Firewall (SMB)

Get Logs & Monitor Issue with a Central Management 1400 Appliance

Qixing_Cao — Thu, 20 Dec 2018 06:23:28 GMT

1400 appliance‌logging missing_logging‌

Hi everybody, I have got some issue when generate Views in Logs & Monitor tab in SmartConsole with a Central Management 1450 wireless appliance (R77.20.81_990172541), and my Management Server version is R80.20 with all latest recommend hotfixes.

But something strange happens, when I manually open a logs tab in SmartConsole, all logs including Action:Accept & Drop can be found, like this :

But I open the Views such as Access Control views, there is no record of any Action:Accept logs, only dropped, and no traffic accounting, such like this:

I can't find any sk about this problem in Support Center.

Can Anyone Help Me?

Re: Get Logs & Monitor Issue with a Central Management 1400 Appliance

Danny — Thu, 20 Dec 2018 08:14:28 GMT

Please show us what you've configured within the Monitor blade of your 1400 object. Maybe the traffic accounting wasn't checked.

The Activity Timeline should show values for the accept action if it's higher than 1%. Just try a shorter time range and review if it changes. Example from R80.20 M1. Maybe it's also another R80.20 issue as documented here.

Re: Get Logs & Monitor Issue with a Central Management 1400 Appliance

G_W_Albrecht — Thu, 20 Dec 2018 08:41:18 GMT

This should be located here, even when it is centrally managed: SMB and SMP

Re: Get Logs & Monitor Issue with a Central Management 1400 Appliance

Qixing_Cao — Thu, 20 Dec 2018 08:58:03 GMT

Thanks for replying

I tried to check the monitor blade in 1400 object, but as sk115722 said, it's grayed.

Re: Get Logs & Monitor Issue with a Central Management 1400 Appliance

G_W_Albrecht — Thu, 20 Dec 2018 09:18:07 GMT

The monitoring Blade is not supported, see sk105380 - Check Point R77.20 for 600 / 700 /1100 / 1200R / 1400 Appliance Known Limitations:

Monitoring Blade

N/A

Other monitoring solutions are available

Re: Get Logs & Monitor Issue with a Central Management 1400 Appliance

Danny — Thu, 20 Dec 2018 09:29:36 GMT

Great, now Qixing Cao figured out why there is no traffic statistics for a SMB appliance and answered his question himself.

Re: Get Logs & Monitor Issue with a Central Management 1400 Appliance

PhoneBoy — Fri, 21 Dec 2018 02:11:00 GMT

What rule(s) are accepting the traffic in question?

Detailed/Extended logs specified in these rules?

Re: Get Logs & Monitor Issue with a Central Management 1400 Appliance

Pedro_Espindola — Sat, 22 Dec 2018 19:32:56 GMT

I don't think that is the cause.

Access control view for my 1470 shows both accept logs and traffic statistics.

Maybe he should check his tracking settings in the rule, accounting, detailed logging, etc.