topic Re: Regarding log storage of SMB appliance in Spark Firewall (SMB)

Regarding log storage of SMB appliance

ykpark — Thu, 02 Feb 2023 08:24:56 GMT

Dear all,

The customer wants to save logs to the SD card of the 1570 appliance.

In this case, even if the 1570 device is rebooted, is it correct that the previous log is saved on the SD card?

Please check the my question.

Thanks and BR.

Re: Regarding log storage of SMB appliance

Chris_Atkinson — Thu, 02 Feb 2023 08:42:47 GMT

Is the device centrally or locally managed?

https://sc1.checkpoint.com/documents/SMB_R81.10.05/AdminGuides/Centrally_Managed/EN/Content/Topics/Viewing-Security-Logs.htm

https://sc1.checkpoint.com/documents/SMB_R81.10.05/AdminGuides/Locally_Managed/EN/Content/Topics/Viewing-Security-Logs.htm

Re: Regarding log storage of SMB appliance

ykpark — Thu, 02 Feb 2023 09:21:35 GMT

It is managed locally.

Re: Regarding log storage of SMB appliance

PhoneBoy — Thu, 02 Feb 2023 18:13:42 GMT

Even if you don’t have an SD card, logs are stored on the local device.
The only difference is the amount of logs you can store locally (SD card allows for more storage).

Re: Regarding log storage of SMB appliance

G_W_Albrecht — Fri, 03 Feb 2023 12:06:26 GMT

After a reboot, all logs are cleared from local storage, but not from the mounted and used SD card - you will only see a gap in logs during reboot there 8)