Third Party Syslogs to Check Point Logging Server Primary/Secodary

[Heath]

We have to Management/Logging servers setup. I know when we setup a gateway we setup the primary and secondary servers. So when one doesn't respond other will start getting the logs.

We have our Cisco ASA's successfully syslogging to the primary CP Management Server and assume we need to syslog to both to support redundancy. Is there an admin guide explaining how the logs are processed between the two CP Management/Logging servers?

[PhoneBoy · Accepted solution]

To the best of my knowledge, the only way you get logs to both the primary and secondary HA server is to log to both management servers.
That applies both to regular gateway logs and syslog.

[the_rock]

Im not aware of any official guide for it, but what Phoneboy said makes total sense. Maybe closest document I can think of is below.

Andy

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGuide/CP...

[PhoneBoy]

It was the conclusion I came to after reviewing CheckMates and a couple of TAC cases. 😉

[the_rock]

Ok, makes sense : - )