> Source: [sk111954](https://support.checkpoint.com/results/sk/sk111954)

# sk111954 - Firewall log's do not pass through VPN tunnel to a remote Log Server 

| Property | Value |
|----------|-------|
| Solution ID | sk111954 |
| Date Created | 2016-06-14 |
| Last Modified | 2021-02-22 |
| Technical Level | Advanced |
| Products | Security Gateway, Logging & Status |
| Versions | R82.10, R82, R81.20, R82.10, R82.20, R81.20, R82 |
| OS | Gaia |

## Symptoms

- * Logs from Security Gateway do not arrive to Log Server through VPN Tunnel. Example Topology:  
  MDS (CMA)---\[SGW1\] ==== VPN Tunnel==== \[SGW2\]---MLM log server
* From Security Gateway 1, telnet/ping to the Log Server is working.
* From Security Gateway 1, telnet to port 257 of the Log Server is not working.  
  fw monitor on Security Gateway 1 is showing that the traffic does not pass through VPN:  

  vpnt1:o\[60\]: \[SGW1 IP\] -\> \[log server IP\] (TCP) len=60  
  eth2:O\[60\]: \[SGW1 IP\] -\> \[log server IP\] (TCP) len=60

## Cause

By design, when "Accept control connections" is enabled, The Security Firewall log connection to the Log Server will be matched by the Security Gateway on the implied Rules instead of the VPN configuration and rulebase.  

Note: Port 257 is encrypted by the Secure Internal Communication (SIC) and is not recommended to send log traffic through a VPN tunnel.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content