Delay in Sign-in Logs for Check Point Remote Secure Access VPN

[Sebastian_O]

I'm trying to understand a strange issue we are experiencing.

For some reason, the successful sign-in logs for the Check Point Remote Secure Access VPN are appearing in MS Entra with nearly an 18-hour delay. We were unaware of this problem for quite some time. I compared these logs with the firewall logs, and I noticed that the time it takes for these logs to appear in MS Entra has been consistently increasing over the past few weeks.

In contrast, information about failed connection attempts seems to appear in the logs within just 10 to 15 minutes.

Thank you for your help!

[PhoneBoy]

Are you using Log Exporter for this?
This might need a TAC case to troubleshoot the sending delays.