- Products
- Learn
- Local User Groups
- Partners
- More
CheckMates Fifth Birthday
Celebrate with Us!
days
hours
minutes
seconds
Join the CHECKMATES Everywhere Competition
Submit your picture to win!
Check Point Proactive support
Free trial available for 90 Days!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
The 2022 MITRE Engenuity ATT&CK®
Evaluations Results Are In!
Now Available: SmartAwareness Security Training
Training Built to Educate and Engage
MITRE ATT&CK
Inside Check Point products!
CheckFlix!
All Videos In One Space
Hello,
I have 1590 with Gaia Embedded R80.20.35.
I am using an external rsyslog server and parsing the records based on IP address of sender to different files.
My problem is, that address is changing time to time, probably as a consequence of adding a new VLAN to the the gateway.
Anytime the latest IP added is in log.
Thanks for any hints
So the IP is not changing randomly but always set to the last IP added !
seems to.
It is annoying to rebuild the parser .
Why not the public address included or better the LAN interface where is the syslog server visible ... ?
Management address evtly ?
You wrote about an external SysLog Server - behind the WAN IF.
I have two syslog servers in place, actually. One is in a local subnet and the other one accessible via VPN in a HQ. Both receive the same IP in question, the newest one., for now.
Local subnet syslog server is brand new, the original one behind VPN was receiving an public IP of sending gateway for a long time until some months ago. I thought it has something with VPN and NAT, but apparently not.
Thanks
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY