Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
FM
Contributor

How to exclude Internal FW logs as source when I edit General Overview view in Smart Console R80.40

Jump to solution

Can you help me on how I can exclude Internal FW logs as source when I edit General Overview or a custom dashboard view in Smart Console R80.40

We are trying to add checkpoint General Overview dashboard to MCAS console (Microsoft Cloud App Security) an we are asked to exclude Internal FW and only include External FW logs or events.

0 Kudos
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

The precise name of the gateway listed in logs you wish to exclude.

View solution in original post

0 Kudos
5 Replies
PhoneBoy
Admin
Admin

I assume you’d add a filter like “not origin:internalFW” or similar?

0 Kudos
FM
Contributor

Is the filter “not origin:internalFW” for the gui?

Can you use an Image such as the attached screen capture of the gui to explain?
Thanks

0 Kudos
PhoneBoy
Admin
Admin

I was speaking in terms of SmartView logs view
But for reports, I believe you’re on the right track.

0 Kudos
FM
Contributor

What is the value i put in the box after 'Not Equals' parameter - refer to the screenshot i attached earlier
Field 'Orgin'
Not Equals 

Should i put 'internalFW'

Thanks

0 Kudos
PhoneBoy
Admin
Admin

The precise name of the gateway listed in logs you wish to exclude.

View solution in original post

0 Kudos