Server Hardening / SmartCentre Logging

[slands10]

We have recently upgraded the OS for our SmartCentre to Win 2K3, and as part of our security policy ran the Microsoft Security Configuration Wizard to eliminate unneeded services.
One problem I have just noticed is that the logging had stopped once the security policy was applied, indicating that the logging explicitly relies on one of the servers services.
Million dollar question - Does anyone know what service would be required for the logging to remain active? I have looked through the list and allowed various services, but I've not been able to locate the offending service. Removing the Security Policy allows the logging to restart.
Any ideas? Many thanks!

[mcnallym]

I would suggest that the hardening is blocking tcp 257. Don't know the name of the service other then it's check point name of fw_log

[slands10]

Ah, thank you!
I edited the policy and expicitly allowed ports relating to the SMartCentre, all is well now!
Again, thanks for your time