Fill in the blank: The _________ collects logs and sends them to the _________ .

This reverses the data flow direction - the Log Server is the receiving destination for logs, not a collector that forwards onward to the Security Management Server.

This inverts the architecture entirely - the Log Server receives logs from Security Gateways; it does not push logs back to Security Gateways.

This incorrectly identifies the Security Management Server as the log collector - the Security Management Server is responsible for policy management and object distribution, while log collection and storage is the dedicated function of the Log Server.

Security Gateways are the traffic enforcement points that inspect connections, generate log records for matched traffic, and forward those records to the Log Server over a secure authenticated channel. The Log Server - whether a dedicated appliance or co-located with the Security Management Server - receives, stores, and indexes all logs, making them queryable via SmartConsole and available for reports and correlation.