The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Domain Log Server uses MDS Log Server IP as Source IP instead of Domain Log Server IP
R80.20, R80.30, R80.40, R81
Platform / Model
Domain Log Server (CLM) uses the Mutli-Domain Log Server (MLM) IP address instead of the Domain Log Server (CLM) IP address as a source IP for its log exporter communications on UDP port 514 (syslog). This behavior can be verified with tcpdump packet captures.
UDP API fails to provide Sender Bind Options to server.