CloudGuard Controller Monitoring

In This Section:

Messages

Message	Description
`Mapping of Data Center server url <`URL`> with user <`User`> started`	CloudGuard Controller successfully connected to the data center. It starts to map the Data Center objects.
`Mapping of Data Center server url <`URL`> with user <`User`> finished`	CloudGuard Controller successfully mapped the Data Center objects. It starts to monitor the Data Center changes.
`Data center server objects were successfully updated on gateway <`Name`>`	The Data Center object was successfully updated on the Security Gateway.

Message

Description

Mapping of Data Center server url <URL> with user <User> started

CloudGuard Controller successfully connected to the data center.

It starts to map the Data Center objects.

Mapping of Data Center server url <URL> with user <User> finished

CloudGuard Controller successfully mapped the Data Center objects.

It starts to monitor the Data Center changes.

Data center server objects were successfully updated on gateway <Name>

The Data Center object was successfully updated on the Security Gateway.

You have these options to confirm, if there is Data Center connectivity and if the Security Gateway enforces Data Center objects:

Option	Description
On the Management Server	Follow these steps: Connect to the command line. Run: `cpstat vsec`
In SmartConsole	Follow these steps: From the left navigation panel, click Gateways & Servers. Select your Management Server object. At the bottom, from the Summary tab, click Device & License Information -> Device Status.

Option

Description

On the Management Server

Follow these steps:

In SmartConsole

Follow these steps:

From the left navigation panel, click Gateways & Servers.
Select your Management Server object.
At the bottom, from the Summary tab, click Device & License Information -> Device Status.

You can see CloudGuard Controller logs as traffic logs in the SmartConsole Logs & Monitor tab.

When a data center object matches a rule, CloudGuard Controller puts the object name, the Source or Destination fields, (not the IP address), in the log details.
If an object from a higher level in the hierarchy is in the rule base, CloudGuard uses the lowest possible object in the log that matches the IP address.