Check Point SmartEvent Report

[andresilva]

Dear CheckMates,

I receive the Check Point SmartEvent Report: Vulnerability Management generated from the Infinity Portal on a daily basis.

However, the report is always blank and contains no data.

Could you please advise what I might be doing incorrectly in the configuration?

BTW: I have the license: CP-HAR-EP-COMPLETE

Thank you for your assistance.

Andre Silva

[PhoneBoy · Accepted solution]

These reports rely on the Threat Hunting feature, do you have it enabled?

1. Log in to the Harmony Endpoint Infinity Portal.
2. Go to:
   Policy > Threat Prevention > Policy Capabilities
3. In the Capabilities & Exclusions pane, select Analysis & Remediation.
4. Set Enable Threat Hunting to On.
5. Click Save & Install.

Once the clients received the updated policy, these reports should start populating with data.

[the_rock]

What Phoneboy advised certainly makes sense.