cancel
Showing results for 
Search instead for 
Did you mean: 
marcusmm8
Level 10

Checkpoint 80.20 and new syslogs export info

This is more of additional information. Checkpoint 80.20 has updated their syslog exports (including administrative logs), where if you had filter/rules created, you may need to update them to reflect those changes. One of those changes are that system changes are no longer in POLICYMODIFY, but SERVICE INFO.

Labels (2)
0 Kudos
2 Replies
wolram
Level 11

Re: Checkpoint 80.20 and new syslogs export info

Please open a support case with your logs, so that we can adjust things since it looks like what they changed it to is matching something else now.  Make sure to point out which ones are coming in as ServiceInfo that should be remapped to PolicyModify.  Thanks.

0 Kudos
marcusmm8
Level 10

Re: Checkpoint 80.20 and new syslogs export info

Good idea. I have opened a ticket, although this may require additional research since i am not sure of what other events may have been impacted by the upgrade by checkpoint.

0 Kudos