After you configure log forwarding to Log Collectors,
managed firewalls open a TCP connection to all configured Log Collectors.
These connections timeout every sixty (60) seconds and do not indicate
that the firewall has lost connection to the Log Collectors. When
you configure log forwarding to a local or Dedicated Log Collector over
an ethernet interface, the firewall traffic logs show
the firewall being able to successfully connect to the Log Collectors.
If you configure log forwarding over the management port, no traffic
generated. Traffic logs showing
are generated by all firewalls except for the PA-5200 and PA-7000