Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Checkpoint Firewall Management Server Lost Identity in MARS

About a month ago, we added our Checkpoint firewall to MARS as well as the 2 Firewall agents who reported to the device. The devices were recognized and running properly.

At some point in the last week, the Checkpoint management server lost it's identity within MARS. Instead of being recognized as a Checkpoint device, the server is now considered a "Generic Router Version Unknown" via the Device Type.

The agent firewalls beneath this device still exist as desired, but MARS is no longer recording logs for the primary device.

I'm ready to remove and recreate the device, but I'm interested to figure out how this could have happened. Nothing in the Audit Trail points to any weird configuration changes.

I've posted a picture here: http://pixpin.com/viewer.php?file=mars-checkpoint-j1zc.jpg

1 REPLY
Bronze

Re: Checkpoint Firewall Management Server Lost Identity in MARS

It might have to do with bug CSCse03097 - CheckPoint LEA record comes to MARS later and later for better understanding

256
Views
0
Helpful
1
Replies