Checkpoint LEA not getting the action field
Hi
I've successfully setup a LEA connection with my Checkpoint management station, enabled tracknig and reporting is working. Though I'm not getting any data in "Security Reports" and 'VPN Reports'.
After checking out the retrieved log in <fwa_dir>/Firewall/server/default/archive/<ip> I can't see the action of each log entry. This is probably why I can't see "Top Denied Hosts' etc.
So my question, how do I get the action (drop, accept, etc.) into the logs? And will this also solve my empty 'VPN Reports'?
Thanks in advance.
Best regards
Tommy
New to ADSelfService Plus?