This can be done (I did it back in the R55 era), but I've only done it on
UNIX-derivative systems...
It's a 2-step process:
1) Pick a log level you want to piggy-back, then configure the local syslog
service to send to a remote syslog server -- this is usually done by editing
/etc/syslog.conf:
local#.info @{remoteIP}
where "#" is the log level you want to hijack (4 or 5 I've found to work
well)...
2) configure the firewall to direct the logs to that syslog:
On secureplatform, I think you can modify /etc/rc.d/init.d/cpboot with the
following (this I think replaced $FWDIR/bin/fwstart):
fw log -f -t -n -l | logger -p local4.info -t Firewall-1 &
You'll want to double-check my syntax -- things may have changed since I
last did this...
On Wed, Feb 10, 2010 at 5:30 PM, carlopmart <[email protected]> wrote:
> Hi all,
>
> How can I configure smartcenter server (R70.1) to send all logs to a
> central syslog server??
>
> I use this syslog server to audit several type of logs from different
> servers.
>
> Many thanks.
> --
> CL Martinez
> carlopmart {at} gmail {d0t} com
>
> Scanned by Check Point Total Security Gateway.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
