[prev in list] [next in list] [prev in thread] [next in thread] 

List:       firewall-1
Subject:    Re: [FW-1] can't see logs based on "Origin" filter
From:       "<Aaron Reynolds>" <Aaron.Reynolds () FRANKLINCOVEY ! COM>
Date:       2002-08-30 17:12:26
[Download RAW message or body]

Found out what it was.  I forgot to change the host assignment, to point to
the external address.  Once I changed it, stopped and started firewall, the
firewall started logging with the external address as the origin.  Thanks
for the input.

-----Original Message-----
From: Leon Noble [mailto:leon@SCOTLANDONLINE.CO.UK]
Sent: Friday, August 30, 2002 8:04 AM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: Re: [FW-1] can't see logs based on "Origin" filter


Hi Aaron,

Check the interface defined in $FWDIR/conf/external.if make sure that it
matches what you think your external interface is.

Also in your Firewall object type the hostname of your system in the name
field and press get. Also in the interfaces tab, press get this will update
all your defined interfaces.

cheers

Leon.

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST@beethoven.us.checkpoint.com]On Behalf Of <Aaron
Reynolds>
Sent: 29 August 2002 23:19
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: [FW-1] can't see logs based on "Origin" filter


My firewalls are logging, but I can't see them when I filter based on
logging.  I have a firewall who's IP in the general tab is the external
address, but when it logs, it is logging with the internal interface.  When
I filter on Origin, and select the firewall object, it doesn't show any
logs.  I have to create a seperate workstation object representing the
internal interface to see the logs.  I have the internal interface defined
on the interface tab of the firewall object.  Is this the way it is supposed
to work, or is something messed up?

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================
[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic