FW Logs Restricted Permission to End Users

[ahmedaburaihan]

Hi Mates!

Is there any possibility to give restricted permissions to specific users in the network, to just see the Logs with very basic information. 

For example:

I need to give permission to specific users who could only see SRC ist communicating to DST with SERVICE  or this is blocked. 

Is it possible using LOGS or is there any specific effort to do?

SRC-x  --> DST-y --> with SERIVCE:http for example (blocked or allowed)

Thank you very much for a suggestion.

A.

[the_rock]

Will check this in the lab later, but Im thinbking possibly custom permission profile in smart console...

Andy

[G_W_Albrecht]

You can create Permissions as read-only and Track Logs only, see https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuid...

But users will be able see all logs, there is no granularity here...

[PhoneBoy · Accepted solution]

SmartView allows you to assign a fixed query to a user that they cannot override.
https://community.checkpoint.com/t5/Management/Limited-Permission-Profile/m-p/32868#M21934 

[the_rock]

I would say what Phoneboy gave looks like the correct option.

Andy