Exporting Views and Reports

The Export to PDF and Export to CSV options save the current view or reportClosed Summary of network activity and Security Policy enforcement that is generated by Check Point products, such as SmartEvent. as a PDF or CSV file, based on the defined filters and time frame.

To see your exported views and reports:

  1. Add a new tab. Click +.

  2. Go to Tasks > Archive.

Generating a Network Activity Report

Note - When you export a view or report to CSV, only tables are exported. You can download a zip folder which contains a separate CSV file for each table.

To export a view or report to PDF or CSV:

  1. In SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on., open the Logs & Monitor view.

  2. Click the + tab to open a new tab.

  3. Click Views or Reports.

  4. Select a view or report.

  5. Click Export to PDF.Optionally:

    Alternatively, click Open and from inside the view or report click Options > Export to PDF or Export to CSV.

The Network Activity report shows important Firewall connections. For example, top sources, destinations, and services. To create this report, SmartEvent must first index the Firewall logs. Indexing is on by default in R80 and higher, in all environments except for StandaloneClosed Configuration in which the Security Gateway and the Security Management Server products are installed and configured on the same server..

To enable the Network Activity Report for Security Gateways R80.10 and higher:

In SmartConsole, in the Access Control Policy ruleClosed Set of traffic parameters and other conditions in a Rule Base (Security Policy) that cause specified actions to be taken for a communication session., add per Session to the Track settings. See Tracking Options.

To enable the Network Activity Report for Security Gateways R77.30 and lower:

  1. In SmartConsole, open the Logs & Monitor view.

  2. Click the (+) to open a new tab.

  3. In the External Apps section, click SmartEvent Settings & Policy link.

  4. In the SmartEvent GUI client > Policy tab, select and expand Consolidated Sessions.

  5. Select Firewall Session.

    Note - This configuration increases the number of events per day by about five times. To avoid a performance impact, make sure the hardware can handle the load.

Sharing Reports

You can share a report you created with your team, without export or import. If a regular admin shares a view or report, it is shared with all the admins on the domain. A super admin for the Multi-Domain ServerClosed Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS. can share with all users under all domains.

To share a report:

  1. In SmartConsole, open Logs & Monitor and click + to open a new tab.

  2. Click Reports and select a report.
  3. Click Actions and select Share.

  4. Click Yes to approve sharing the report.

    The report is now marked as shared.

The report owner can undo the action and unshare the report.

To unshare the report:

Click Actions and select Unshare.

Note - A Super User can take ownership of reports or views created by other administrators via the take ownership feature.

Permissions when an owner shares a view/report:

 

Visible on Catalog

Can Edit

Can clone

Can Delete

Owner

+ + + +

Super User

+ - + -