This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
ABOUT CHECKMATES & FAQ
Create a Post
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Libor_Kovar
Contributor
‎2022-01-25 01:55 AM

Gaia Embedded gateway's IP address in external syslog server records changing randomly

Hello, 

I have 1590 with Gaia Embedded R80.20.35.

I am using an external rsyslog server and parsing the records based on IP address of sender to different files.

My problem is, that address is changing time to time, probably as a consequence of adding a new VLAN to the the gateway.

Anytime the latest IP added is in log.

Thanks for any hints

 

Labels
0 Kudos
5 Replies
G_W_Albrecht
Legend
Legend
‎2022-01-25 02:23 AM

So the IP is not changing randomly but always set to the last IP added !

CCSE CCTE CCSM SMB Specialist
0 Kudos
Libor_Kovar
Contributor
‎2022-01-25 03:05 AM
In response to G_W_Albrecht

seems to.

It is annoying to rebuild the parser .

 

0 Kudos
Libor_Kovar
Contributor
‎2022-01-25 03:09 AM
In response to Libor_Kovar

Why not the public address included or better the LAN interface where is the syslog server visible ... ?

Management address evtly ?

0 Kudos
G_W_Albrecht
Legend
Legend
‎2022-01-25 05:23 AM
In response to Libor_Kovar

You wrote about an external SysLog Server - behind the WAN IF.

CCSE CCTE CCSM SMB Specialist
0 Kudos
Libor_Kovar
Contributor
‎2022-01-25 05:34 AM
In response to G_W_Albrecht

I have two syslog servers in place, actually. One is in a local subnet and the other one accessible via  VPN in a HQ. Both receive the same IP in question, the newest one., for now.

Local subnet syslog server is brand new, the original one behind VPN was receiving an public IP of sending gateway for a long time until some months ago.  I thought it has something with VPN and NAT, but apparently not.

Thanks

0 Kudos