Policy Reports

A policy report shows information about the assigned policies on each Endpoint Security Client computer in the organization. You cannot see the Policy Report in SmartEndpointClosed A Check Point GUI application which connects to the Endpoint Security Management Server, to manage your Endpoint Security environment - to deploy, monitor and configure Endpoint Security clients and policies.. It is a CSV file that is created on the Endpoint Security Management ServerClosed A Security Management Server that manages your Endpoint Security environment. Includes the Endpoint Security policy management and databases. It communicates with endpoint clients to update their components, policies, and protection data. at scheduled times.

To enable scheduled Policy Reports:

  1. On the Endpoint Security Management ServerClosed Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server., run: cpstop

  2. Open the server's local.properties file: $UEPMDIR/engine/conf/local.properties

  3. Find the line: #emon.scheduler.time=9:55:00,10:55:00,15:33:00

    • Delete the # from the line

    • Edit the times to show the hour when the reports will be created. Reports will be created each day at these times.

    • Make sure the line is in this format: emon.scheduler.time=HH:mm:ss,HH:mm:ss,HH:mm:ss
      with no spaces between the times and commas.

  4. Find the line: #emon.scheduler.max.reports=10

    • Delete the # from the line

    • The number represents the maximum number of reports that can remain in the report directory. The oldest ones are overridden by newer ones. Optional: Edit the number.

    • Make sure the line is in this format: emon.scheduler.max.reports=<number of reports to save>.

  5. Find the line: #emon.scheduler.policyreport=true

    • Delete the # from the line

    • Make sure the line is in this format: emon.scheduler.policyreport=true

  6. Create a new folder in $FWDIR/conf/SMC_Files/uepm/reports/. Run:

    mkdir $FWDIR/conf/SMC_Files/uepm/reports
    chmod 2777 $FWDIR/conf/SMC_Files/uepm/reports

    The name of the report will be: policyReport<number>.csv

    The number represents the creation time so newer reports have higher numbers.

  7. Run: cpstart

When a Policy Report is generated, it includes these fields: