- Products
- Learn
- Local User Groups
- Partners
- More
The State of Ransomware Q1 2026
Key Trends and Their Impact
Good, Better, Best:
Prioritizing Defenses Against Credential Abuse
AI Security Masters E7:
How CPR Broke ChatGPT's Isolation and What It Means for You
Blueprint Architecture for Securing
The AI Factory & AI Data Center
Call For Papers
Your Expertise. Our Stage
CheckMates Go:
CheckMates Fest
Someone has turned on TCP state logging which is not enabled by default. This feature was mentioned in my Max Power 2020 book, pages 319-322. See sk101221: TCP state logging
Looks to me like in your case the TCP state updates are not being properly tacked on to the existing log entry; I would speculate that perhaps you only have session logging enabled for the rule matching this connection, but not connection logging which is I imagine where the TCP state updates will need to go. For the difference between the two see my 2022 CPX speech Max Gander: The Hidden World of Log Generation and...
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY
