topic Re: Alert in Sandblast agent in Endpoint https://community.checkpoint.com/t5/Endpoint/Alert-in-Sandblast-agent/m-p/16017#M3586 <HTML><HEAD></HEAD><BODY><P>So the report one is a bit tricky with the different version:</P><P></P><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">SandBlast Agent and report compatibility matrix</P><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">&nbsp;</P><DIV style="direction: ltr;"><TABLE border="1" cellpadding="0" cellspacing="0" style="direction: ltr; border-collapse: collapse; border: 1pt solid #a3a3a3; width: 392px;"><TBODY><TR><TD style="vertical-align: top; width: 194px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">Version</P></TD><TD style="vertical-align: top; width: 74px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">TE Report</P></TD><TD style="vertical-align: top; width: 90px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">SBA Forensic Report</P></TD></TR><TR><TD style="vertical-align: top; width: 194px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;"><SPAN style="font-weight: bold;">SmartLog</SPAN> R77.30.02 or higher</P></TD><TD style="vertical-align: top; width: 74px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">Yes</P></TD><TD style="vertical-align: top; width: 90px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">Yes</P></TD></TR><TR><TD style="vertical-align: top; width: 194px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;"><SPAN style="font-weight: bold;">R77.30 SE</SPAN></P></TD><TD style="vertical-align: top; width: 74px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">No</P></TD><TD style="vertical-align: top; width: 90px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">No</P></TD></TR><TR><TD style="vertical-align: top; width: 194px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;"><SPAN style="font-weight: bold;">R77.30 NGSE</SPAN> with special HF</P></TD><TD style="vertical-align: top; width: 74px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">No</P></TD><TD style="vertical-align: top; width: 90px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">Yes</P></TD></TR><TR><TD style="vertical-align: top; width: 194px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;"><SPAN style="font-weight: bold;">R80.10 SE</SPAN></P></TD><TD style="vertical-align: top; width: 74px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">&nbsp;Yes</P></TD><TD style="vertical-align: top; width: 90px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">Yes&nbsp;</P></TD></TR></TBODY></TABLE></DIV><P></P><P>So in your case the simple anser is "in SmartLog" <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P>EMail alerts can only be issued by setting up an "automatic reaction" in SmartEvent.</P><P>&nbsp;</P><P>Regards Thomas</P></BODY></HTML> Fri, 20 Apr 2018 10:06:20 GMT Thomas_Werner 2018-04-20T10:06:20Z Alert in Sandblast agent https://community.checkpoint.com/t5/Endpoint/Alert-in-Sandblast-agent/m-p/16016#M3585 <HTML><HEAD></HEAD><BODY><P><SPAN style="color: #333333; background-color: #ffffff;">Hello , &nbsp; In sandblast agent in Anti ransomware when It detects ransomware and restore the files the pop up comes "Its notified to the Administrator." Where it sends alert? And Can we set alert for the same in smart endpoint 77.30.03? and where I can see the forensic reports if I do not have smart event?</SPAN></P></BODY></HTML> Wed, 18 Apr 2018 11:22:31 GMT https://community.checkpoint.com/t5/Endpoint/Alert-in-Sandblast-agent/m-p/16016#M3585 Blason_R 2018-04-18T11:22:31Z Re: Alert in Sandblast agent https://community.checkpoint.com/t5/Endpoint/Alert-in-Sandblast-agent/m-p/16017#M3586 <HTML><HEAD></HEAD><BODY><P>So the report one is a bit tricky with the different version:</P><P></P><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">SandBlast Agent and report compatibility matrix</P><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">&nbsp;</P><DIV style="direction: ltr;"><TABLE border="1" cellpadding="0" cellspacing="0" style="direction: ltr; border-collapse: collapse; border: 1pt solid #a3a3a3; width: 392px;"><TBODY><TR><TD style="vertical-align: top; width: 194px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">Version</P></TD><TD style="vertical-align: top; width: 74px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">TE Report</P></TD><TD style="vertical-align: top; width: 90px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">SBA Forensic Report</P></TD></TR><TR><TD style="vertical-align: top; width: 194px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;"><SPAN style="font-weight: bold;">SmartLog</SPAN> R77.30.02 or higher</P></TD><TD style="vertical-align: top; width: 74px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">Yes</P></TD><TD style="vertical-align: top; width: 90px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">Yes</P></TD></TR><TR><TD style="vertical-align: top; width: 194px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;"><SPAN style="font-weight: bold;">R77.30 SE</SPAN></P></TD><TD style="vertical-align: top; width: 74px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">No</P></TD><TD style="vertical-align: top; width: 90px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">No</P></TD></TR><TR><TD style="vertical-align: top; width: 194px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;"><SPAN style="font-weight: bold;">R77.30 NGSE</SPAN> with special HF</P></TD><TD style="vertical-align: top; width: 74px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">No</P></TD><TD style="vertical-align: top; width: 90px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">Yes</P></TD></TR><TR><TD style="vertical-align: top; width: 194px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;"><SPAN style="font-weight: bold;">R80.10 SE</SPAN></P></TD><TD style="vertical-align: top; width: 74px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">&nbsp;Yes</P></TD><TD style="vertical-align: top; width: 90px; padding: 4pt; border: 1pt solid #a3a3a3;"><P lang="de" style="margin: 0in; font-family: Calibri; font-size: 11.0pt;">Yes&nbsp;</P></TD></TR></TBODY></TABLE></DIV><P></P><P>So in your case the simple anser is "in SmartLog" <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P>EMail alerts can only be issued by setting up an "automatic reaction" in SmartEvent.</P><P>&nbsp;</P><P>Regards Thomas</P></BODY></HTML> Fri, 20 Apr 2018 10:06:20 GMT https://community.checkpoint.com/t5/Endpoint/Alert-in-Sandblast-agent/m-p/16017#M3586 Thomas_Werner 2018-04-20T10:06:20Z