We have used the latter solution with a rule that only allows the remote firewalls to communicate with the log server.
src dest service Action fw1 mgt-srvr FW1_log Accept fw2 mgt-srvr FW1_log Accept fw3 mgt-srvr FW1_log Accept -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 09, 2003 5:04 AM To: [EMAIL PROTECTED] Subject: [FW-1] NG loggers Hi all, i have a little problem with loggers definition in remote FW1 module. Management -- Firewall -- Internet -- Firewall Remote Firewall still try to send logs to private IP address of Management. In old 4.1 version i use loggers file with valid IP address. I've found this workaround: 2 NAT rules applied to remote module, like this: Src Dst Src Dst Fw Mngt-private Fw Mngt-public Mngt-public Fw Mngt-private Fw or creating a Checkpoint object with public Management IP address, enabling it as Log server and setting in remote Firewall as Log server. Anybody have found one more clean solution? Thanks Riccardo ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
