This is more of additional information. Checkpoint 80.20 has updated their syslog exports (including administrative logs), where if you had filter/rules created, you may need to update them to reflect those changes. One of those changes are that system changes are no longer in POLICYMODIFY, but SERVICE INFO.
Please open a support case with your logs, so that we can adjust things since it looks like what they changed it to is matching something else now. Make sure to point out which ones are coming in as ServiceInfo that should be remapped to PolicyModify. Thanks.
Good idea. I have opened a ticket, although this may require additional research since i am not sure of what other events may have been impacted by the upgrade by checkpoint.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process. Learn more today by joining now.