The Check Point Security Management Server, when functioning as a Log Server, receives logs from Security Gateways via the fw.log process. This process listens on TCP port 257 by default. The Firewall Daemon (FWD) process on the Security Gateway establishes a connection to this port on the Log Server to transmit log data. This is the primary and legacy mechanism for log collection in the Check Point architecture.

A. 18191: This port is used by the CPD (Check Point Daemon) process for Secure Internal Communication (SIC), primarily for operations like policy installation and status updates, not log collection.

B. 443: This is the standard port for HTTPS. It is used for web-based management (e.g., Gaia Portal) and for SmartConsole client connectivity to the Security Management Server.

C. 258: This port is used by the FWD process when a Log Server forwards logs to another Log Server. It is not used for the initial log collection from a Security Gateway.

1. Check Point Support Center, SecureKnowledge sk22564: "Ports used for communication by Check Point software". In the table "Ports on Security Management Server / Log Server / SmartEvent Server / Multi-Domain Server", the entry for port 257/tcp explicitly states the service is "Logging and monitoring" and the description is "Log server accepts logs from gateways (FWD process)".

2. Check Point R81.20 Logging and Monitoring Administration Guide: In Chapter 1, "Introduction to Logging", the section "The Logging Process" describes how logs are generated on the Security Gateway and sent by the fwd process to the Log Server. The communication port for this process is detailed in official port lists as 257.

3. Check Point R81.20 Security Management Administration Guide: In Chapter 2, "Security Management Architecture", the section "Communication and Security" implicitly covers the different communication channels. It reinforces that different daemons use specific ports for their functions, with logging being a distinct channel from management (CPD) or GUI access (HTTPS).