- Products
- Learn
- Local User Groups
- Partners
- More
The State of Ransomware Q1 2026
Key Trends and Their Impact
Good, Better, Best:
Prioritizing Defenses Against Credential Abuse
AI Security Masters E7:
How CPR Broke ChatGPT's Isolation and What It Means for You
Blueprint Architecture for Securing
The AI Factory & AI Data Center
Call For Papers
Your Expertise. Our Stage
CheckMates Go:
CheckMates Fest
Not sure why the ROW_START/ROW_END items are there, but they seem to be related to the Unified Policy matching process.
It seems to be expected behavior even on on-SMB gateways (look at example #2 here): https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuid...
To confirm this is expected behavior, a TAC case might be needed.
There are no options to tune what is sent via syslog on SMB appliances, unfortunately.
I don't know the logic used to truncate the logs entries sent via syslog.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY
