i ve seen this in a ng environment with two external ip120.
the solution was setting up a checkpoint-object with the external ip of the
static nated manager, selecting "logserver" and
"secondarymanagementstation" , no SIC.

changing log server an mgmt server of the external modules to this object
and downloading policy.

do you have a extra object with external mgmt ip an allow connections to
this one?

cu, ro

At 07:05 03.04.2003 -0500, you wrote:
Once of our remote locations is having difficulties with logging.  It
seems logging has stopped all together. The last entry in their logs is
from the management station, with the entry reading something like this:

No.   Date    Time   Interface     Origin
X       X        X        daemon       IP from their mgmt
station    control    ctl

The info line states the obvious "stopped logging"


The firewall seems fine, traffic is still passing & they are still able to push policy.

So we need help on two things, getting logging started again & an easy way
to automate the logs.  (dump and create a new log every day.

**Setup:

2000 server management station------> 2 Nokia ip440s firewalls
checkpoint 4.1


Thanks


=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

-- Rainer Orsario, IT-Service / Security Bacher Systems EDV GmbH, Wienerbergstr. 11B, A-1101 Wien, Austria phone : +43 (1) 60 126-34 | fax: +43 (1) 60 126-4 e-mail: [EMAIL PROTECTED] | web: www.bacher.at

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to