Re: Checkpoint Firewall rulebase - logs

On Sun, Aug 05, 2007 at 07:45:07AM -0300, Andrew Hay wrote:

> One thing I'd be careful about is piping the fw log to logger on a
> firewall that is under substantial load.

I wouldn't recommend running it on a firewall at all.  I'd recommend
running it on the management station.

> Another issue with exporting logs via the logger method is that you
> cannot disable service name resolution (or at least I have lost the
> switch how to disable it).

IIRC, you can do this with -n.  Google confirms [curiously, a post by
tbird]:

http://www.splunk.com/base/Checkpoint/30987

- Morty