Gateway logs locally

[Karel_Mate]

Hello, 

My client gateway keeps on logging locally even though the connections to the management is never disconnected, We already opened a TAC case but still there is no current solution. We already tried this sk153772, sk114616, but still the logs keeps logging locally, the logs will sometimes sent it to the management and it will comeback to logging locally. The setup is the management server is also a log server. There is no other log server.  

Screenshot from the gateway

Screenshot from the management

Screenshot from the HCP result.

Thanks

[PhoneBoy]

You best bet is to engage the TAC: https://help.checkpoint.com 

[Machine_Head]

Perhaps try disabling logging for some noisy rules like DNS, or  check the hit count for heavy rules, and see what happens?

[Karel_Mate]

Will check this one if it work. Thanks.

[Sven_Glock]

I had a similar situation in the past.

The solution was to remove logserver from the gateway config, install policy, add the logserver again and install policy.

[Karel_Mate]

Hi, Sven_Glock, already tried this one but the issue still persist. Thanks.

[just13pro]

What is your Mgmt & GW version + JHF ?

Had an experience once with similar issue where Mgmt server has lower JHF than the GW.

Once upgraded the JHF for Mgmt Server, it fixed by itself.

[Karel_Mate]

Hi @just13pro mgmt and gateway is on R81.20 take 26, What version installed on your devices so I can check it also.

Thanks

[just13pro]

Oh... it might not applicable to your case as mine is GW in Take 26.

Upgraded the Mgmt to Take 41, after rebooted it works itself.

For your case, you might want to take a look this https://support.checkpoint.com/results/sk/sk181068

[Karel_Mate]

Hi, i see, will try to install the take 41 on all GW and management and see if it will fix the issue, will check also the SK.

Thanks.