R80 NAT logs for RO accounts

[kamado]

So we have a recently upgraded R80.40 Provider-1. For certain CMAs, users only have Read Only accounts.

With the log viewer I know you can edit profile settings to show xlate columns for NAT as these are not visible by default in the "Firewall" profile.

However read only accounts cannot do this as settings are greyed out.

Is there any way to achieve this? i.e. can a read/write user modify a profile which can then be opened by a read-only account?

It's a bit of a problem when you have extensive use of NAT, but can't see what's actually going on in a troubleshooting scenario.

[PhoneBoy]

Are you trying to do this with SmartConsole or SmartView (web-based)?

[kamado]

Hi PhoneBoy (I feel honoured, I still have your book somewhere 🙂 )
This is with SmartConsole. I did try web based Smartview, and that does show XLate, but only in the right hand pane, and there's no way to add a xlate column in the main log viewer.

[PhoneBoy]

Huh, you are correct:

 

I think you can do something like the following to make the profile available to the Read Only user: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

 

[kamado]

Thanks for the pointer. Will give this a try. It certainly looks like it should do the trick.