About a month ago, we added our Checkpoint firewall to MARS as well as the 2 Firewall agents who reported to the device. The devices were recognized and running properly.

At some point in the last week, the Checkpoint management server lost it's identity within MARS. Instead of being recognized as a Checkpoint device, the server is now considered a "Generic Router Version Unknown" via the Device Type.

The agent firewalls beneath this device still exist as desired, but MARS is no longer recording logs for the primary device.

I'm ready to remove and recreate the device, but I'm interested to figure out how this could have happened. Nothing in the Audit Trail points to any weird configuration changes.

I've posted a picture here: http://pixpin.com/viewer.php?file=mars-checkpoint-j1zc.jpg