> Source: [sk118697](https://support.checkpoint.com/results/sk/sk118697)

# sk118697 - Logging session does not switch to the backup logging server after connectivity loss

| Property | Value |
|----------|-------|
| Solution ID | sk118697 |
| Date Created | 2017-07-05 |
| Last Modified | 2026-09-08 |
| Technical Level | General |
| Products | Security Gateway, Check Point Firewall |
| Versions | R82.10, R82, R81.20, R81.10 (EOS), R82.20, R81 (EOS) |

## Symptoms

- The primary Security Management server is configured as default Logging server. The secondary Management is the backup log server. After disconnecting the primary Management, the gateway does not automatically switch to sending logs to the backup server.  


We can see failover of the Management HA and the loss of connectivity, but the session on port 257 on the gateway to the primary Management stays open and no session is being created to the backup log server.

## Solution

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing it.  
For faster resolution and verification, collect these files:

1. [CPinfo](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92739) file from the Management Server involved in the case.
2. [CPinfo](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92739) file from the Security Gateway / each Cluster Member involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168597).

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content