Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 10

Checkpoint 80.20 and new syslogs export info

This is more of additional information. Checkpoint 80.20 has updated their syslog exports (including administrative logs), where if you had filter/rules created, you may need to update them to reflect those changes. One of those changes are that system changes are no longer in POLICYMODIFY, but SERVICE INFO.

Labels (2)
0 Kudos
2 Replies
Level 11

Please open a support case with your logs, so that we can adjust things since it looks like what they changed it to is matching something else now.  Make sure to point out which ones are coming in as ServiceInfo that should be remapped to PolicyModify.  Thanks.

0 Kudos

Good idea. I have opened a ticket, although this may require additional research since i am not sure of what other events may have been impacted by the upgrade by checkpoint.

0 Kudos