Rules or attributes which are set to be tracked as alerts are matched by a passing connection.You can set global alert parameters for all gateways in the system, or specify an action to send an alert for a particular gateway. By default, an alert is sent as a pop-up message to the administrator desktop when a new alert arrives to SmartView Monitor. The Security Management Server forwards these alerts to SmartView Monitor. The gateways send alerts to the Security Management Server. The administrator can define alerts to be sent for different gateways and for certain policies or properties.
Monitoring and Handling AlertsĪlerts provide real-time information about possible security threats, and how to avoid, minimize, or recover from the damage.
The view can be based on CPU Use %, to collect information about the status, activities hardware and software use of Check Point products in real-time. A report can be created to determine what can prevent network connections.
The view can be based on an inspection of: Specific Services, Firewall rules or Network Objects, that can be known to impede the flow of Internet traffic. This makes sure what can clog up the company's gateway interface. If the Internet access of a company is slow, a Traffic view and report can be created.SmartView Monitor scenariosĮxamples of scenarios for which SmartView Monitor can help: In SmartView Monitor you can create customized monitoring view. Cooperative Enforcement, for Endpoint Security Servers.VPN tunnel monitoring (SmartView Monitor only).The monitoring views show real-time and historical graphical views of: This provides a comprehensive view of gateways, tunnels, remote users, network, security, and performance over time. You can generate Real-time and historical graphical reports of monitored events. These Firewall rules can be created dynamically through the graphical interface and be set to expire in a specified time period. If suspicious activity is detected, administrators can immediately apply a Firewall rule to the applicable Security Gateway to block that activity. That way, administrators identify top bandwidth hosts that can influence network performance. With custom or defined views, administrators can drill-down the status of a specified gateway and/or a segment of traffic.
For example, Check Point System Counters collect information on the status and activities of Check Point products (for example, VPN or NAT). You can see graphical from an integrated, intuitive interface.ĭefined views include the most frequently used traffic, counter, tunnel, gateway, and remote user information. SmartView Monitor allows administrators to easily configure and monitor different aspects of network activities.
Based on Check Point Security Management Architecture, SmartView Monitor provides a single, central interface, to monitor network activity and performance of Check Point Software Blades. This system helps you to establish work habits based on learned system resource patterns. SmartView Monitor is a high-performance network and security analysis system. Use it to respond quickly and efficiently to changes in gateways, tunnels, remote users and traffic flow patterns or security activities. SmartView Monitor gives you a complete picture of network and security performance. Monitoring Traffic and Connections In This Section: