Re: A few questions I can't help with your LDAP question, but I can maybe add some input to your logging question. fw logexport can be used to convert Check Point-format logs into text files. It doesn't remove old log files though - they still stay there. The logs themselves are not "full" - it's the disk space. If you run a logexport with low disk space, you're certainly going to run out of space, since an exported log file is bigger than the Check Point format one. You can configure options within Smart Dashboard, on the gateway or managment object, as appropriate, under the Logs and Masters section, to automatically delete logs, or stop logging, if disk space gets to certain thresholds. Personally I wouldn't bother exporting logs, unless you have a requirement to put them into text, perhaps for reading with something else. Better to set up log rotation scripts, then archive them after a bit. Note that compressing them reduces them to about 10% of their size. Some people do like to put them in text for archival purposes, so that they can be read in future, without requiring special software. This depends on your site policy. |