Exporting Views and Reports

The Export to PDF and Export to CSVoptions save the current view or reportClosed Summary of network activity and Security Policy enforcement that is generated by Check Point products, such as SmartEvent. as a PDF or CSV file, based on the defined filters and time frame.

Note- When you export to CSV, only tables are exported.

To export a view or report to PDF or CSV:

  1. In SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on., open the Logs & Monitor view.

  2. Click the +tab to open a new tab.

  3. Click Viewsor Reports.

  4. Select a view or report.

  5. Click Export to PDF.Optionally:

    Alternatively, click Openand from inside the view or report click Options > Export to PDF or Export to CSV.

To see your exported views and reports:

  1. Add a new tab. Click +.

  2. Go to Tasks > Archive.

Generating a Network Activity Report

The Network Activityreport shows important Firewallconnections. For example, top sources, destinations, and services. To create this report, SmartEventmust first index the Firewalllogs. Indexing is on by default in R80and higher, in all environments except for StandaloneClosed Configuration in which the Security Gateway and the Security Management Server products are installed and configured on the same server..

To enable the Network Activity Report for Security GatewaysR80.10and higher:

In SmartConsole, in the Access ControlPolicy ruleClosed Set of traffic parameters and other conditions in a Rule Base (Security Policy) that cause specified actions to be taken for a communication session., add per Sessionto the Tracksettings. See Tracking Options.

To enable the Network Activity Report for Security GatewaysR77.30and lower:

  1. In SmartConsole, open the Logs & Monitor view.

  2. Click the (+) to open a new tab.

  3. In the External Appssection, click SmartEvent Settings & Policy link.

  4. In the SmartEventGUI client > Policytab, select and expand Consolidated Sessions.

  5. Select Firewall Session.

    Note - This configuration increases the number of events per day by about five times. To avoid a performance impact, make sure the hardware can handle the load.

Sharing Reports

You can share a report you created with your team, without export or import. If a regular admin shares a view or report, it is shared with all the admins on the domain. A super admin for the Multi-Domain ServerClosed Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS.can share with all users under all domains.

To share a report:

  1. In SmartConsole, open Logs & Monitor and click +to open a new tab.

  2. Click Reportsand select a report.
  3. Click Actions and select Share.

  4. Click Yes to approve sharing the report.

    The report is now marked as shared.

The report owner can undo the action and unshare the report.

To unshare the report:

Click Actions and select Unshare.

Note - A Super User can take ownership of reports or views created by other administrators with the Take ownership feature.

Permissions when an owner shares a view/report:

 

Visible on Catalog

Can Edit

Can clone

Can Delete

Owner

+ + + +

Super User

+ - + -