Re: one enforcement point not logging Can you ping the Management station from the firewall that isn't logging? You may need rules to allow this. Can you ping the other way around? Again, may need rules. Can you push policies to the firewall? Can you fetch policies? You can do a tcpdump on the Nokia to see if it's trying to send the logs to the management station... i.e. tcpdump -i eth1 port 257. I used eth1 for my interface name, your's may be different. Use the interface that is pointing to the management station. Where is the management station in location related to the firewall? Is it directly connected, is it behind another firewall? Is it accessable to the firewall? Did this firewall ever log to the management station? Is the log file on the Nokia growing? You can check this by changing to $FWDIR/log and running an ls -al, checking the size of the fw.log file and running the ls -al command again and rechecking the size. Last edited by Lackie; 2005-11-07 at 12:27. |