After a new Log Server is added to the environment and the SIC trust has been established with the SMS what will the gateways do?
After a new Log Server is added to the environment and the SIC trust has been established with the SMS what will the gateways do?
When a new Log Server is introduced into the environment and the SIC (Secure Internal Communication) trust has been established with the Security Management Server (SMS), the gateways do not automatically send logs to the new Log Server. Instead, each gateway must be manually configured through SmartConsole to direct its logs to the new log server. This ensures that log management and storage meet the specific needs and configurations of the environment.
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Multi-DomainSecurityManagement_AdminGuide/Topics-MDSG/Configuring-Logging-in-Logging-and-Monitoring.htm
Correct, if you have log server outside of SMS, you have to configure it in the settings. https://sc1.checkpoint.com/documents/SMB_R80.20/AdminGuides/Locally_Managed/EN/Content/Topics/Configuring-External-Log-Servers.htm?TocPath=Appliance%20Configuration%7CLogs%20and%20Monitoring%7C_____3 https://sc1.checkpoint.com/documents/SMB_R80.20/AdminGuides/Locally_Managed/EN/Content/Topics/Configuring-External-Log-Servers.htm?TocPath=Appliance%20Configuration%7CLogs%20and%20Monitoring%7C_____3
PAGE 558 in CCSA book - Logs are not automatically forwarded to a new Log Server.