NGX R65 Release Notes - Check Point

Eventia Suite
Eventia Suite
In This Section
Eventia Analyzer page 14
Eventia Reporter page 14
Eventia Analyzer
1. Eventia Analyzer does not support static NAT and therefore will not include logs with rules that
use static NAT as part of the Event.
2. Apache syslogs sometimes have a log suppression mechanism where a new log contains the
phrase message repeat. These logs are not captured by Eventia Analyzer and therefore events
based on these logs will not be generated.
3. Changes to objects on a High Availability secondary server are not updated on the Eventia
Analyzer Server.
4. Changes to objects on a High Availability management server are not automatically updated on
the Analyzer Server following a sync operation from another HA server. To force updates of the
objects, on the Eventia Analyzer Client, select Policy tab > General Settings > Objects > Network
Objects > Refresh.
5. When attempting to use the Get Version option in the Eventia Analyzer module while editing its
host properties in SmartDashboard, the version will result in an empty string. Select the most
recent version available.
6. Address range objects are not synchronized from SmartCenter or the MDS server to the Eventia
Suite server. In order to include them on the Eventia Suite server, from the Eventia Analyzer
Client, select Policy tab > General Settings > Network Objects and add the range manually.
7. Eventia Analyzer cannot be installed with SmartUpdate.
8. To define a new event based upon order logs, save and modify an existing event that uses the
order logs, such as Check Point administrator credential guessing.
9. On Solaris, no logs are received and processed for 10 minutes if the Log Server is stopped and
restarted. If a Log Server is stopped and then started, restart the Correlation Units.
10. The Global Exceptions product field does not filter out logs from the audit log.
Eventia Reporter
Installation, Upgrade and Backward Compatibility
11. Eventia Reporter can be upgraded to NGX R65 from version NG R56 and later. If you are
upgrading from a version prior to R56, uninstall Reporter and continue with the upgrade.
12. The MySQL server on the Eventia Reporter Server conflicts with a MySQL server installation on
the same computer. Install the Eventia Reporter server on a computer that does not contain a
MySQL server installation.
13. Eventia Reporter will not continue consolidation sessions if the log files were manually
upgraded on the Log Server.
14. After upgrading from R56 to NGX (NGX R61), a scheduled report that is selected for a specific
module may fail to run. If this occurs, resave the report.
VPN-1/FireWall-1 NGX R65 Known Limitations Supplement. Last Update — February 4, 2008 5:37 pm 14