Please contact Check Point support to get a definitive solution for this issue.
Note: You may need to perform some fwd debug to determine why the firewall cannot send logs to the log server.
To Restart Logging to the Check Point Management Server
This workaround assumes that you have verified that fwd
process is running and that it is possible to ping the log server.
If a firewall module stops logging to the management server, and will not resume logging, do the following.
1. Define a dummy logserver
object, update the module to use this dummy object under the "Logging Servers" section of the fw/cluster
object, and push policy.
2. Reset the module to log to the original logserver
object and push policy again.
This should trigger the firewall to start logging to the management station. This workaround is much less intrusive than doing a cpstop/cpstart