After a new Log Server is added to the environment and the SIC trust has been established with the SMS what will the gateways do?
After a new Log Server is added to the environment and the SIC trust has been established with the SMS what will the gateways do?
Logs are not automatically forwarded to a new Log Server. SmartConsole must be used to manually configure each gateway to send its logs to the server. This allows for granular control over which gateways send logs to the new Log Server.
https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_Multi-DomainSecurityManagement_AdminGuide/Topics-MDSG/Configuring-Logging-in-Logging-and-Monitoring.htm
It's B
After a new Log Server is added to the environment and the Secure Internal Communication (SIC) trust has been established with the Security Management Server (SMS), the gateways will need to be manually configured to send their logs to the new Log Server. This is not an automatic process.
Once the new Log Server is added and the SIC trust is established, the gateways will be aware of the new Log Server during the next policy installation, and they will begin sending their logs to it accordingly.
Logs are not automatically forwarded to a Log Server. You must manually configure each relevant Security Gateway to send its logs to the new Domain Log Server. Refer to https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Multi-DomainSecurityManagement_AdminGuide/Topics-MDSG/Configuring-Logging-in-Logging-and-Monitoring.htm?TocPath=Logging%20and%20Monitoring%7CConfiguring%20Logging%7C_____0#Configuring_Logging
I literally just spun up an R81.20 Management server and gateway and without changing anything the gateway has the option "Send gateway logs and alerts to server" so it definitely isnt B
Once the Secure Internal Communication (SIC) trust is established between the Security Gateways and the new Log Server, the log forwarding process is automatic. The gateways will begin to send their log data to the new Log Server without requiring additional manual configuration, provided that the policy is installed to recognize the new Log Server.