Unable to view the Gateway system log

[Wang]

Hello，engineers

        Select "Send Syslog Messages to Management Server" in the Gateway's Web interface, but the Gateway's system log is not visible in the SmartConsole.

I also tried to configure checkpoint Log Server's IP address on the Gateway's Web interface, "Remote System Logging," but when I logged into the log Server, I still didn't receive the Gateway system log

[HeikoAnkenbrand · Accepted solution]

Hi @Wang 

Logs from the gateway to the management server are sent via tcp port 257
More here: R80.x - Ports Used for Communication by Various Check Point Modules

If this doesn't work, it may be due to missing implied rules or NAT.

[PhoneBoy]

Also, I question how useful this is in general as you would need to create your own syslog parsers in order to be able to more easily "see" the relevant information in SmartView.

[Wang]

You mean third party Syslog Server?

[Wang]

Hello, any good Suggestions?

[Wang]

Gateway and Management Server can communicate over TCP port 257

[G_W_Albrecht]

Can you tell us what is missing from GW Logs if you do not use SysLog at all ?

[Sameer_Basha]

Was this resolved ?

i am facing the same thing

[Chris_Atkinson]

Are you trying sk55020 or simply the following option?

 

[Sameer_Basha]

on the GW clish i have enabled

GW2> show syslo
GW2> show syslog cp
GW2> show syslog cplogs
Sending syslog syslogs to Check Point's logs is enabled
GW2>

On the Gaia portal under syslogs i have enabled send syslogs to management server.