TABLE OF CONTENTS Now that you have seen how to create your Check Point security infrastructure, it s time to see the traffic that is hitting your different components. SmartView Tracker enables the security administrator to visualize traffic that is passing by. What good is it to have a security policy if you are not able to see what is happening? The SmartView Tracker will be your daily friend having the ability to parse through the logs is important to maintain and update your security policies.
Tracking users, connections, and administration through your logs is completely dependent on the gateway s configuration. To be able to audit rules, investigate misfeasors, or simply gather statistics, you need to enable logging for the items you care to examine. In some cases, you need minimal information about a particular connection. For example, if you are auditing a rule, you may need only to log it so that you can see the gateway s action for that connection. In other instances, you may desire more thorough data. If you need to audit HTTP requests, you need to not only log but also Audit the connections to receive more data.
In this chapter, we will discuss the need for tracking and walk through a few configuration examples. After reading this material, you should be able to parse through your firewall logs and easily find the data you are seeking.
In your Check Point gateways, you, as an administrator, have a very robust tool that allows you to customize your product...
