CheckPoint reports

EventLog Analyzer supports CheckPoint Firewall and provides out-of-box reports for:

• CheckPoint Events: Information on all events on CheckPoint devices.
• Firewall Allowed and Denied Traffic: Insights on traffic based on source, destination, protocol and port, also provides a report on traffic trends.
• Successful and Failed Logons: Insights on successful and failed logons categorized based on the user, the source, and the general trend.
• Firewall Accounts Management: Reports on user and user group added or deleted.
• Configuration: Reports on configuration changes, interface status and executed commands.
• Firewall IDS/IPS Events: Insights on attacks based on source and destination IP address and attack trends.
• System Events: Reports on system shutdowns and clock updates.
• Device Severity: Emergency, alerts, critical, error, warning, and notice events.

CheckPoint reports dashboard

• Go to the Reports section. Navigate to Network Devices and select CheckPoint from the displayed list of devices.

• You can set filter criteria for events based on Source, Severity and Device and Message.

• Use logical operators as required to create the filter criteria.

• Select the Period for which you want the data to be displayed and click Apply.

• The graphs can be viewed in different formats.

• To quickly export the report in view, click Export as and choose the format. Once done, you can download the report.

• Click Scheduled Reports to have this report exported and emailed periodically.

• Click More for further customization options.
1. Set as Default, to set this report as the default for CheckPoint reports.
2. Add to Favorites, to mark this report as favorite.
3. Pin to dashboard, to pin this report to the main dashboard in the Home page.