Check Point L-71 - Configuring External Log Servers; Managing Active Devices

Appliance Configuration
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 110
Configuring External Log Servers
The Logs & Monitoring > Log Servers page lets you configure external log servers for security and
system logs for additional logging storage.
External Syslog Server Configuration
You can configure a gateway to send logs to multiple external syslog servers.
To configure an external syslog server:
1.
Under Syslog Servers, click Configure.
The External Syslog Server window opens.
2.
Enter a Name and IP address.
3.
Enter a Port.
4.
Select Enable log server.
5.
Optional - Select Show Obfuscated Fields. Obfuscated packets are shown as plain text.
6.
Select logs to forward:
• System logs
• Security logs
• Both system and security logs
7.
Click Apply.
To configure additional syslog servers:
Click Add Syslog Server.
You can send security logs to syslog servers. The security logs show in the syslog format, not in
the security logs format.
To edit the external syslog server:
1.
Click the Edit link next to the server's IP address.
2.
Edit the necessary information.
3.
Click Apply.
Note - When more than one server is defined, the syslog servers show in a table. Select the syslog
server you want to edit and click Edit.
To delete the external syslog server:
1.
Select the syslog server.
2.
Click Delete.
The server is deleted.
Managing Active Devices
See Managing Active Devices (on page 50).