4-52
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 4 Configuring Firewall Devices
Check Point Devices
Specify Log Info Settings for a Child Enforcement Module or Log Server
There are two occasions when you must define the log settings manually:
•
If you do not discover the settings of the primary management station, which does discover the log
settings.
•
If the child enforcement module does not propagate its logs up to the primary management station.
Three options exist for manually specifying the log settings:
•
Management.
Identifies that the child enforcement module propagates it logs up to the primary
management station, the MLM or the SmartCenter server. You do not specify these settings; they are
derived from the settings on the primary management station. However, the option is available if the
configuration of a child enforcement module changes. If the primary management station is the log
server for a child enforcement module, the log server information is populated when you perform
the test connectivity operation.
Figure 4-1
Log Information Published to Primary Management Station
•
Log Server.
Identifies that another log server, such as a CLM, is acting as the log server for this
child enforcement module. You must either select a pre-defined log server or define the settings for
a new one and select it.
•
Self.
Identifies that the child enforcement module is acting as its own log server. In this case, you
must specify the communication settings required to pull the logs from that module or server.
To specify the log server settings of a child enforcement module manually, follow these steps:
Step 1
(Firewall only) If a child enforcement module does not propagate its log information to the primary
management station, then select that child enforcement module under Device Type, click
Log Info
, and
do one of the following:
•
To specify that the child enforcement module is acting as its own log server, select
Self
and continue
with
Step 3
, omitting the Device Name field.
