CPLog to Syslog Install Conflict (R77.30)

[Wyman]

Hi all. We need to allow our firewalls to forward logs to our syslog server. The latest hotfix installed on the management server is R77.30 Take 342.

When I tried to install Check_Point_CPLogToSyslog_R77_30_Jumbo_HF_T216.tgz it doesn't install because there is a conflict with the Jumbo Hotfix Accumulator for R77.30 Take 117 (installed as part of Take 342)

Would uninstalling Take 342, installing the syslog hotfix, then reinstalling 342 be possible? 

[Wyman]

My mistake - I found the Syslog option under Servers and OPSEC Applications.

[Chris_Atkinson]

When able please explore your options for upgrading to R80.20 or above with support for LogExporter.

Note R77.30 is End of Support after this month.

[PhoneBoy]

Log Exporter replaces CPLogToSyslog and should be available for R77.30.

[Wyman]

Hi Phoneboy,

Thanks for that. Just to confirm, our 3rd party service provider says that the syslog port from CheckPoint is 10527. I guess I can just create a NAT rule that will convert from UDP 514 to 10527?

[PhoneBoy]

You should be able to send syslog to any pory (514 is the default).
Again, I would be doing this with Log Exporter and not CPLogToSyslog.
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...