> Source: [sk175406](https://support.checkpoint.com/results/sk/sk175406)

# sk175406 - The size of the /opt/CPNacPortal/logs/access_log file on the Security Gateway increases beyond 1GB

| Property | Value |
|----------|-------|
| Solution ID | sk175406 |
| Date Created | 2021-09-09 |
| Last Modified | 2023-01-06 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- The file */opt/CPNacPortal/logs/access_log* on the Security Gateway continually grows with no automatic maintenance.

## Solution

This problem was fixed. The fix is included starting from:

* [Check Point R81.20](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk173903)

Check Point recommends to always upgrade to the most recent version ([Security Gateway](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=435) / [VSX](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=359) / [Security Management Server](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=184) / [Multi-Domain Security Management Server](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=166) / [SmartConsole](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=191)).

**Explanation of the fix:**

Starting in R81.20, the log file *$NACPORTAL_HOME/logs/access_log* is part of the configuration file */etc/cpshell/log_rotation.conf* on the Security Gateway.

**Workaround for versions R81.10 and lower:**

Follow [sk113241 (How to configure Gaia OS to rotate a custom log file)](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk113241) to add the file **$NACPORTAL_HOME/logs/access_log** in the configuration file **/etc/cpshell/log_rotation.conf** on the Security Gateway / each Cluster Member.  

Workaround to remove save1 and save2 files by following below plan of action  

Take backup of $CPDIR/bin/nac_portal_reader file on gateway.  

#cp $CPDIR/bin/nac_portal_reader $CPDIR/bin/nac_portal_reader_BACKUP  
--\>Edit the file and remove these lines:  

#sessions  

if \[\[ -d $NACPORTAL_HOME/save2 \]\]; then  
rm -f -r $NACPORTAL_HOME/save2  
fi  
if \[\[ -d $NACPORTAL_HOME/save1 \]\]; then  
mv $NACPORTAL_HOME/save1 $NACPORTAL_HOME/save2  
fi  
mv $NACPORTAL_HOME/session $NACPORTAL_HOME/save1  
mkdir $NACPORTAL_HOME/session  
chmod 777 $NACPORTAL_HOME/session  

saved file and installed policy.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content