Not able to find any logs for IPv6

[Lalitkumar]

Dear Team,

Thanks in advance for the help.

I have an issue with IPv6 logs my management server (R 81). i am not able to find any logs for the IPv6 Network. I am using both IPv4 & IPv6 simultaneously. I can see logs for the IPv4 network successfully , not for the IPv6 Network.

Kindly , Please help me to resolve for getting logs of IPv6 Network..

[Chris_Atkinson]

The security gateway is configured for IPv6?

What search syntax/filters are you using with Smartlog?

[Lalitkumar]

Hi Chris ,

Thanks for your kind prompt..

The security gateway is configured for IPv6 enabled.

i am using syntax Src:2002::0. if i am wrong , Please correct me the right syntax/filters

[Lalitkumar]

all hits are countable on IPv6 policy for specific users with Source & Destination address. I can see log on TCPDUMP as well.

[Chris_Atkinson]

Do you see corresponding logs if searching by rule or other criteria?

Sounds like a indexing issue of sorts, please contact TAC.

[Lalitkumar]

Hi Chris,

Thanks for helping me..

I can see the hit count on policy in management server, But for better log inspection i am using SmartView Tracker (R77.30). I am not able to figure out complete log in it. 

In my scenario, using Primary MDS/MLM & Secondary MDS/MLM which contains approx 47 CMA & its corresponding Security Gateway.

On login SMS for CMA corresponding security Gateway. i am not able to see any logs for IPv6 Network (Source & Destination address).

If possible, Please help to me write proper filter for finding & inspecting the ipv6 logs in SmartView Tracker (R77.30).

My main aim is to see logs in SmartView Tracker (R77.30).

Thanks for your kind help for the same in advance.

[Chris_Atkinson]

Sorry is the management R81 as your first post states or no?

R77.30 has been out of support since September 2019.

Would recommend engaging further with your local account team in this case.

[Lalitkumar]

Yes, management is running on R81. But for better log inspection i am using SmartView Tracker (R77.30).

[Chris_Atkinson]

This doesn't make sense nor compatable, if you need the old style tracker it can be found in the R81 SmartConsole program install folder e.g. C:\Program Files (x86)\CheckPoint\SmartConsole\R81\PROGRAM\CPlgv.exe

But you first should confirm if IPv6 logs can be seen in SmartLog such is the current standard / best practice.

My suspicion as I said earlier is an indexing issue that you should discuss with Support (TAC).

[Lalitkumar]

Thanks for your kind response to my query,

I will go ahead with with Support (TAC) as per your last post..

Again, Thank you.

[PhoneBoy]

The legacy SmartView Tracker does not show IPv6 logs.
This is a known, documented limitation.
See: [redacted broken link]

You need to use SmartView if you want to see these logs.

[Lalitkumar]

Thanks for your kind help to me.

But I am not able to open this above link for IPv6 documented limitation. Will you please share the pdf doc for the same to me.

[Chris_Atkinson]

Please see -

Limitation: SmartView Tracker is not able to filter the logs by IPv6 address in Source / Destination columns. For such filtering, use SmartLog .

Source: SmartView Tracker does not display logs for IPv6 traffic (checkpoint.com)