Main Screen - SmartView

To open this view:

Step

Instructions

1

In your web browser, connect to the SmartView on your Security Management ServerClosed Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server. or Domain Management ServerClosed Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server.:

https://<IP Address of Management Server>/smartview

2

At the top, click the + tab.

The New Tab Catalog tab opens.

3

In the left tree, click Views.

4

In the top search field, enter the word cyber.

5

A list shows the available Cyber Attack View views.

6

Double-click the Cyber Attack View - Gateway (or select it and click Open).

Example: SmartView > New Tab Catalog > Views

Example: Cyber Attack View - Gateway

All the correlated events are tagged with a Severity and Confidence Level of Medium and above (Check Point assigns these tags, and users cannot change them). The queries that run in the background show events with these tags.

All the other events show in the Additional Events section.