Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Wang
Collaborator
Jump to solution

Unable to view the Gateway system log

Hello,engineers

        Select "Send Syslog Messages to Management Server" in the Gateway's Web interface, but the Gateway's system log is not visible in the SmartConsole.

11.png12.png

 

 

 

 

 

I also tried to configure checkpoint Log Server's IP address on the Gateway's Web interface, "Remote System Logging," but when I logged into the log Server, I still didn't receive the Gateway system log

13.png14.png

0 Kudos
1 Solution

Accepted Solutions
HeikoAnkenbrand
Champion Champion
Champion

Hi @Wang 

Logs from the gateway to the management server are sent via tcp port 257
More here: R80.x - Ports Used for Communication by Various Check Point Modules

Screenshot_20200714-173915_Edge.jpg

If this doesn't work, it may be due to missing implied rules or NAT.

 

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips

View solution in original post

9 Replies
HeikoAnkenbrand
Champion Champion
Champion

Hi @Wang 

Logs from the gateway to the management server are sent via tcp port 257
More here: R80.x - Ports Used for Communication by Various Check Point Modules

Screenshot_20200714-173915_Edge.jpg

If this doesn't work, it may be due to missing implied rules or NAT.

 

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
PhoneBoy
Admin
Admin

Also, I question how useful this is in general as you would need to create your own syslog parsers in order to be able to more easily "see" the relevant information in SmartView.

0 Kudos
Wang
Collaborator

You mean third party Syslog Server?

0 Kudos
Wang
Collaborator

Hello, any good Suggestions?

0 Kudos
Wang
Collaborator

Gateway and Management Server can communicate over TCP port 257

0 Kudos
G_W_Albrecht
Legend Legend
Legend

Can you tell us what is missing from GW Logs if you do not use SysLog at all ?

CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
0 Kudos
Sameer_Basha
Employee
Employee

Was this resolved ?

i am facing the same thing

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Are you trying sk55020 or simply the following option?

images.png

CCSM R77/R80/ELITE
0 Kudos
Sameer_Basha
Employee
Employee

on the GW clish i have enabled

GW2> show syslo
GW2> show syslog cp
GW2> show syslog cplogs
Sending syslog syslogs to Check Point's logs is enabled
GW2>

On the Gaia portal under syslogs i have enabled send syslogs to management server. 

 

syslog.png

 

 

 

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events