Security Management Portal Service Domain log contains GW log?

[sean_yeung]

Hi all,

 I want to forward gateway log to external syslog server. 

Somehow at security management portal, the setting named "forward SMP system logs to an external Syslog server" seems only forward service domain's syslog rather than gateway's log.

Can anyone please clarify this is the correct place to configure.

 

Thanks.

[PhoneBoy]

Security logs and OS logs are different things.
Not sure if you can do this for an SMP-managed device, but I believe the device itself can send logs via syslog (at least with the latest R80.20.x firmware).
Check Logs & Monitoring > Logs > External Log Servers.

[Ted_Serreyn]

This can be done still with SMP managed devices.  Interesting enough it appears to be exactly how checkpoint sends its logs to the SMP cloud servers.

If you wanted to manage centrally, it would need to be via cli commands as I don't see where we could configure it centrally in SMP 12.30