R80 - SAM rules?

[M_Ruszkowski]

In R80 where did the SAM rules move to?  In the R80 guide it states"In the SmartView Monitor toolbar, click the Suspicious Activity Rules button.", however I do not see this option.  Did I miss something?

[Timothy_Hall]

Doesn't appear to be possible in the R80 SmartConsole from what I can see, however you can still work with SAM rules by running the original SmartView Monitor GUI here:

C:\Program Files (x86)\CheckPoint\SmartConsole\R80\PROGRAM\SmartViewMonitor.exe

--

My book "Max Power: Check Point Firewall Performance Optimization"

now available via http://maxpowerfirewalls.com

[Tal_Paz-Fridman · Accepted solution]

You can still create and view from 2 locations in the SmartConsole:

1| Logs & Monitor > New tab - in the lower (left) section go to the External Apps section > Tunnel & User Monitoring

2| Gateways & Servers > Select a Security Gateway > Link for Device & License Information ​> Traffic

[Timothy_Hall]

Wasn't aware of the easy way to invoke the SmartView Monitor in the R80 SmartConsole via the "Tunnel & User Monitoring" link, great tip!

--

My book "Max Power: Check Point Firewall Performance Optimization"

now available via http://maxpowerfirewalls.com

[PhoneBoy]

It looks like the first option starts up SmartView Monitor.

The section option only seems to work if you have the Monitoring Blade enabled.

[M_Ruszkowski]

That worked.  I was able to get to the SAM rules by using the SmartView Monitor, and launching it via the External Apps.   I think under the External Apps there should be an option "Legacy SmartView Monitor".    If all these features are not in the new console and we must still use parts of the old, then there needs to be a clear link/s to the old consoles through the new R80 console.   And the documentation needs to be updated.

Thank your for the help.