Searching logs of CheckPoint NGX R62 for SMTP traffic

Posted on 2009-04-28
Last Modified: 2013-11-30
We have recently installed a Barracuda 300 Spam firewall behind our CheckPoint NGX R62. We have not fully implemented the relay feature of the Cuda. We have been blacklisted since the 300 install and Barracuda says our IP reputation is "Poor." Barracuda says to check for outbound SMTP originating for multiple IPs on our network.
How would I make a defined search for this on the NGX logs?
Question by:abpExpert
    LVL 6

    Accepted Solution

    You would open the smartview tracker and filter the service column to smtp (right-click the column/filter. Depending on your config you may also include source internal net or other usefull criteria). For this to work your policy needs to have logging enabled on the rule that processes smtp traffic.
    LVL 18

    Expert Comment

    As a side note to this bud, R62 will be unsupported as of the end of may this year.

    CP will only support R65 and R70.  It may be prudent for you to consider upgrading bud.

    Just for your info in case you weren't aware.

    Author Comment

    Thanks bud. so the destination IP is for the outbound traffic?

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Suggested Solutions

    Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
    The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now