- Products
- Learn
- Local User Groups
- Partners
-
More
Celebrate the New Year
With CheckMates!
Value of Security
Vendor Self-Awareness
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
Mobile Security
Buyer's Guide Out Now
Important! R80 and R80.10
End Of Support around the corner (May 2021)
Hello, everyone,
Up to R80 there was a "Test connection" button in the report configuration page for SmartEvent, which was quite useful.
How can I test the SMTP server connection when configuring a scheduled report in R80.10?
The R80.10 Loggin and Monitoring admin guide describes the procedure for previous version.
Not sure why that was removed, but you're correct, it doesn't appear to be there.
Hopefully it can return in later releases.
Have the same issue now, reports are configured to be mailed but don't receive anything. is there any cli configuration that can be checked.
Unless Kfir Dadosh or Dan Zada have suggestions, I suggest opening a TAC ticket.
Which version are you using?
In latest R80.10 JHF you have the "Test Server Connectivity" button:
Thanks Kfir and Dameon.
Just to note there is exceptions to the devices
All suitable (except Smart-1 525/5050/5150 appliances) | Take_112 |
Hi guys, My device is a 5150, on R80.10 with the HF take 103, is there any cli configurations that be checked to investigate further why the reports are not being sent out. I can confirm that there is access from the device to the smtp server as I am able to telnet and connect to it on the smtp port.
Good to know this is now available! Thanks, Kfir!
My mistake guys,
The connectivity test button is available as part of SmartView customers HF, and part of R80.20.
Sorry for the confusion.
Hi Kfir, when will this functionality be moved back into the place where it belongs, in the SmartEvent server configuration instead of in the per user configuration of reports?
In R77.30 this was a server based configuration, as it should be, but now each user that schedules a report has to set the mail server configuration. The latter is not really good practice in a MSP setup with many customers on 1 single SE server.
Can you archive and send us the $RTDIR/log/smartview.log file?
Also, can you tcpdump while running the test?
tcpdump -i lo -s 0 -w smtp.pcap port 25
We have seen an issue with fragmented smtp packet that was dropped by the SMTP server or some middleware in between. We are currently evaluating a fix for this. Assuming this is the same issue, I can provide you with the fix once it will be ready.
Is this the only place where you can define an Email server?
This would be needed in
1. Alerts
2. Certain Monitored changes such as failover
3. Distribution of Certificates when using MAB
Is it feasible that this only works with internal sendmail and unauthenticated releay? What is the correct procedure to configure an email server for outgoing notifications on a Check Point Gateway?
Ty,
Cezar
As far as I know, the above only applies for this specific SmartEvent report and not generally throughout the product.
For most other places, you configure it here: Configuring "Mail Alerts" using "internal_sendmail" command
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY