If you are sure the 257 is reaching the manager, you could first try a
cprestart on the manager, if this is no good try doing a cpstop and
moving or deleting the entire contents of the log directory, then a
cpstart. A separate log server will behave much in the same way until
you do an install database to it, it will ignore the 257 that it gets.

-GS

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] On Behalf Of Sergio
Alvarez
Sent: Wednesday, July 18, 2007 7:54 PM
To: [email protected]
Subject: [FW-1] Problem with logs

Hello,

We have a deployment with a SmartCenter (SMC) over SPLAT, a couple of
Nokia
boxes running IPSO Clustering in front of that SMC, and an extra fw
module
also running over Nokia in a remote location.

Everything runs Check Point NGX R60 HFA05.

The remote fw module is new and we have SIC working properly, it is
possible
to install the policy on it with no issues and we see traffic in TCP/257
(FW1_log) passing though the Cluster with the remote module as the
source
and the SMC as the destination, but those logs are not shown in the SV
Tracker.

There is nothing between the Cluster and the SmartCenter so we are sure
this
traffic must be reaching the SMC network, so do you guys know of any
reason
why logs could reach a SMC but not be displayed in the SV Tracker???

We will do extra tests tomorrow with me on site, but I just can't think
what
could be wrong....

Any assistance with this issue will be very appreciated.

Regards

-- 
Sergio Alvarez
(506)8301342

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to