This article applies to:

• Firewall Suite

Question:

Procedure:

When rotating the log file for a Check Point firewall, below are the proper steps to follow.

1. Stop the LEA Server service.
2. Delete the lastrecord.txt files in the log file directory, located below:

   <Installation Directory>\LeaCache\x_x_x_x.dat

   [where x_x_x_x is the internal IP for the firewall]

   During the configuration of the LEA Service or when configuring the profile that utilizes this service the log file location can be configured to use a location other than the default location above. If this option was used, remove the lastrecord.txt files from the location specified in the custom configuration.

   Note: There will always be a lastrecord.txt file, and there may be a second file with a name beginning with "lastrecord" if the log files are being logged.
   

3. Rotate the log file on the Check Point firewall.
4. Start the LEA Server service.

Notes:

This article was previously published as:

NETIQKB1619