Explanation/Reference:
Explanation:
The most likely reason for the logs data to stop is the low disk space on the logging device, which can be the Management Server or the Gateway Server.

2. Snapshot ManagementThe snapshot creates a binary image of the entire root
(lv_current) disk partition. This includes Check Point products, configuration, and operating system.
Starting in R77.10, exporting an image from one machine and importing that image on anothermachine of the same type is supported.
The log partition is not included in the snapshot. Therefore, any locally stored FireWall logs will not be saved.

Explanation/Reference:
Explanation: Check Point Identity Awareness Software Blade provides granular visibility of users, groups and machines, providing unmatched application and access control through the creation of accurate, identity-based policies. Centralized management and monitoring allows for policies to be managed from a single, unified console.
Reference: https://www.checkpoint.com/products/identity-awareness-software-blade/

ClusterXL has four working modes. This section briefly describes each mode and its relative advantages and disadvantages.