Check Point FW documentation ?

[rmalghan]

Checkpoint Fw Gurus: does anyone have pointers to Checkpoint
documentation that describes the log messages firewall logs and the
syntax. I am trying to understand what the messages mean and also what messages are missing in my log file.

Thanks in advance.
Ravi .

[Lackie]

I don't think there is such a document. What in particular are you concerned about?

[rmalghan]

I am trying to classify the logs coming from firewall as either accept, deny or reject messages. I am seeing a number of messages which are either decrypt or autcrypt or encrypt or keyinst. I am trying to understand what these messages are and how to classify them.

keyinst traffic from X.X.X.X (hostname) to X.X.X.X (X.X.X.X)
authcrypt tcp traffic from X.X.X.X (hostname) to X.X.X.X (hostname) on port 1101 (1101)
decrypt icmp traffic from X.X.X.X (hostname) to X.X.X.X (hostname) of type Photuris - need authorization

Thanks
Ravi