Checkpoint Firewall Management Server Lost Identity in MARS

Unanswered Question
Jan 23rd, 2009
User Badges:

About a month ago, we added our Checkpoint firewall to MARS as well as the 2 Firewall agents who reported to the device. The devices were recognized and running properly.

At some point in the last week, the Checkpoint management server lost it's identity within MARS. Instead of being recognized as a Checkpoint device, the server is now considered a "Generic Router Version Unknown" via the Device Type.

The agent firewalls beneath this device still exist as desired, but MARS is no longer recording logs for the primary device.

I'm ready to remove and recreate the device, but I'm interested to figure out how this could have happened. Nothing in the Audit Trail points to any weird configuration changes.

I've posted a picture here:

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
htarra Fri, 01/30/2009 - 13:57
User Badges:
  • Bronze, 100 points or more

It might have to do with bug CSCse03097 - CheckPoint LEA record comes to MARS later and later for better understanding


This Discussion