Mastering Endpoint Security -
Best Practices for 2024
Check Point Named Leader
In Mobile Threat Defense
Regulatory Compliance Update
For Non-US DoC Versions
Customer Threat Prevention
& Vulnerability Management Survey
CheckMates Toolbox Contest 2024
Make Your Submission for a Chance to WIN up to $300 Gift Card!
CheckMates Go:
Identity Awareness Best Practices
Someone has turned on TCP state logging which is not enabled by default. This feature was mentioned in my Max Power 2020 book, pages 319-322. See sk101221: TCP state logging
Looks to me like in your case the TCP state updates are not being properly tacked on to the existing log entry; I would speculate that perhaps you only have session logging enabled for the rule matching this connection, but not connection logging which is I imagine where the TCP state updates will need to go. For the difference between the two see my 2022 CPX speech Max Gander: The Hidden World of Log Generation and...
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY
