SmartView Web Application

Use Case - You are the system administrator at a small company and are concerned that some employees spend too much time looking at Facebook. You want a way to monitor the employee application use.

The SmartView Web Application is one of the SmartEvent clients that you can use to analyze events that occur in your environment. Use the SmartView Web Application to see an overview of the security information for your environment. It has the same real-time event Record of a security or network incident that is based on one or more logs, and on a customizable set of rules that are defined in the Event Policy. monitoring and analysis views as SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on.. The convenience is that you do not have to install a client.

Note - SmartView graphics do not display properly in Internet Explorer. Accessing SmartEvent Server Dedicated Check Point server with the enabled SmartEvent Software Blade that hosts the events database. from the web (SmartView) is supported only from Google Chrome and Mozilla Firefox.

To log in to SmartEvent using SmartView Web Application:

Browse to:

https://<IP Address of Management Server>/smartview/

or

https://<Host Name of Management Server>/smartview/

Notes: The /smartview/ part of the URL is case sensitive. When you open the SmartView Web Application on a Standalone Configuration in which the Security Gateway and the Security Management Server products are installed and configured on the same server. server (a server which runs both a Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server. and a Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources.), these web portals stop working: The Gaia Portal Web interface for the Check Point Gaia operating system. (https://<Server IP Address> and https://<Server IP Address>:4434) The API documentation portal (https://<Server IP Address>/api_docs) Web SmartConsole (https://<Server IP Address>/smartconsole) Login to SmartView Web Application is supported only using Check Point Password authentication configured in the administrator object in SmartConsole.

SmartView advantages:

• Available for non-admin users

• Export up to 1,000,000 logs

• Integrated top statistics and docked card

• Support for High Contrast theme

In SmartView:

SmartView opens by default in the General Overview tab. This shows the statistics, Software Blades, timelines, and more. Any open tabs from the previous session are retained.

Note - SmartView Web Application is available even without SmartEvent Software Blade Specific security solution (module): (1) On a Security Gateway, each Software Blade inspects specific characteristics of the traffic (2) On a Management Server, each Software Blade enables different management capabilities., but the default page is different.

To open a new tab, click +.

The Audit Logs tab shows audit logs which are changes done in the management.

The Logs > Logs View tab shows blade activities.

In SmartView, you first filter for the application and then by user.

1. Click the + icon to open a new tab.

2. Click Views > Access Control.

3. Right-click the User column and drill down to see the user activity or create a filter for this user in your current view.

You can schedule for all activities for a user, but cannot set the system to trigger an alert at a certain threshold.

To select which columns are shown:

1. Right-click on a column heading and select Profile editor.

   The Profile editor window opens.

2. Select fields to add to or remove from the selected profile.

3. Click OK.

To set user display preferences:

1. Click the drop-down arrow next to your user name and select User Preferences.

2. For Locale, select the display language.

3. For First day of the week, select the day of the week for the weekly logs to start.

4. For Theme, select Default or High Contrast.

   In High Contrast, the view display is white text on a black background.

5. In Default time frame, set the default timeframe for all the SmartView Web Application functionalities.

   The default value is Last 24 hours.

   Note - The default time frames on the SmartView Web Application and SmartConsole are not synchronized.

6. For Email server settings, select Edit to enter the email server details.

7. Click OK.

Exporting Logs

Apply a filter to select the logs you want to export. Currently, you can only export logs to CSV.

To export logs:

1. In the Logs tab, click Options and select Export > Export to CSV.

   The CSV Export window opens.

2. Select the Logs Amount.

3. Select the Exported Columns - All columns or Visible columns.

4. Click OK.

5. A popup window appears when the export process starts.

   When you see a message that the exported completed successfully, click Download.

   All exported logs also appear in the archive tab.