This error is not an indication that logs are not getting sent to the log server(CMA), the fw.log file will also show control and other entries generated from the manager. I have seen this fixed by doing a cpstop, deleting or moving the entire contents of the $FWDIR/log directory, then a cpstart, the fw.log and several other files should get created after the cpstart and be accessible.
-GS ________________________________ From: "[email protected]" <[email protected]> To: [email protected] Sent: Wed, December 22, 2010 6:21:44 AM Subject: [FW-1] Logs to P1 CMA Hi All I have splat boxes in ha mode running R65 managed by CMA. I cannot get the logs. I have correctly setup the logs to send to CMA but when I open the tracker it gives error message "Failed to open file fw.log". I have cjhecked the implied rules which allow to and from management server on port 257. I have also manually allowed to and from enforcemnet modues to cma but no joy. I can see in tcpdump from enforcement modules connection going to CMA on 257. appreciate if some one could help. Is it possible to sendt logs to a syslog server as well. regards Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Scanned by Check Point Total Security Gateway. Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
