topic Re: R80 - SAM rules? in Firewall and Security Management

R80 - SAM rules?

M_Ruszkowski — Thu, 07 Apr 2016 17:31:01 GMT

In R80 where did the SAM rules move to? In the R80 guide it states"In the SmartView Monitor toolbar, click the Suspicious Activity Rules button.", however I do not see this option. Did I miss something?

Re: R80 - SAM rules?

Timothy_Hall — Thu, 07 Apr 2016 19:57:33 GMT

Doesn't appear to be possible in the R80 SmartConsole from what I can see, however you can still work with SAM rules by running the original SmartView Monitor GUI here:

C:\Program Files (x86)\CheckPoint\SmartConsole\R80\PROGRAM\SmartViewMonitor.exe

My book "Max Power: Check Point Firewall Performance Optimization"

now available via http://maxpowerfirewalls.com

Re: R80 - SAM rules?

Tal_Paz-Fridman — Sun, 10 Apr 2016 07:41:49 GMT

You can still create and view from 2 locations in the SmartConsole:

1| Logs & Monitor > New tab - in the lower (left) section go to the External Apps section > Tunnel & User Monitoring

2| Gateways & Servers > Select a Security Gateway > Link for Device & License Information > Traffic

Re: R80 - SAM rules?

Timothy_Hall — Sun, 10 Apr 2016 15:06:00 GMT

Wasn't aware of the easy way to invoke the SmartView Monitor in the R80 SmartConsole via the "Tunnel & User Monitoring" link, great tip!

My book "Max Power: Check Point Firewall Performance Optimization"

now available via http://maxpowerfirewalls.com

Re: R80 - SAM rules?

PhoneBoy — Mon, 11 Apr 2016 04:08:59 GMT

It looks like the first option starts up SmartView Monitor.

The section option only seems to work if you have the Monitoring Blade enabled.

Re: R80 - SAM rules?

M_Ruszkowski — Mon, 11 Apr 2016 13:05:23 GMT

That worked. I was able to get to the SAM rules by using the SmartView Monitor, and launching it via the External Apps. I think under the External Apps there should be an option "Legacy SmartView Monitor". If all these features are not in the new console and we must still use parts of the old, then there needs to be a clear link/s to the old consoles through the new R80 console. And the documentation needs to be updated.

Thank your for the help.