- Products
- Learn
- Local User Groups
- Partners
- More
This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
- Products
- Learn
- Local User Groups
- Upcoming Events
- Americas
- EMEA
- Czech Republic and Slovakia
- Denmark
- Netherlands
- Germany
- Sweden
- United Kingdom and Ireland
- France
- Spain
- Norway
- Ukraine
- Baltics and Finland
- Greece
- Portugal
- Austria
- Kazakhstan and CIS
- Switzerland
- Romania
- Turkey
- Belarus
- Belgium & Luxembourg
- Russia
- Poland
- Georgia
- DACH - Germany, Austria and Switzerland
- Iberia
- Africa
- Adriatics Region
- Eastern Africa
- Israel
- Nordics
- Middle East and Africa
- Balkans
- Italy
- Bulgaria
- Cyprus
- APAC
- Partners
- More
- ABOUT CHECKMATES & FAQ
- Sign In
- Leaderboard
- Events
Scaling Check Point Automation with Arodonata
7 October @ 5pm CET / 11am EDT
What's New in Check Point SASE
The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses
AI Security Masters
Implementing the AI Security Trifecta
CheckMates Go:
Half is Not Enough
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- CheckMates
- :
- Products
- :
- Hybrid Mesh
- :
- SASE and Remote Access
- :
- Monitoring applications and data volume related to...
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Are you a member of CheckMates?
×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
This widget could not be displayed.
1 Solution
Accepted Solutions
Following up the great work of @Tomas_Vobruba mentioning the importance of SmartView Remote Access support, I created the attached View.
It shows the how long the user was connected, which application she/he has accessed and that data volume transmitted. Check the video to learn more how you can use this view.
Jump to solution
Jump to solution
Monitoring applications and data volume related to remote access sessions
Monitoring applications and data volume related to remote access sessions
Following up the great work of @Tomas_Vobruba mentioning the importance of SmartView Remote Access support, I created the attached View.
It shows the how long the user was connected, which application she/he has accessed and that data volume transmitted. Check the video to learn more how you can use this view.
Following up the great work of @Tomas_Vobruba mentioning the importance of SmartView Remote Access support, I created the attached View.
It shows the how long the user was connected, which application she/he has accessed and that data volume transmitted. Check the video to learn more how you can use this view.
12 Replies
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Peter,
are there any method to have a timeline with concurrent active users?
From your template we are able to see the timeline with login peak, but customer asking a timeline with concurrent users.
Thanks in advance.
Jacopo
Hi Peter,
are there any method to have a timeline with concurrent active users?
From your template we are able to see the timeline with login peak, but customer asking a timeline with concurrent users.
Thanks in advance.
Jacopo
Paul_Kellett
Employee Alumnus
2020-03-24
11:49 AM
Paul_Kellett
Employee Alumnus
2020-03-24
11:49 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Have a look over on this page too for some more details in reporting for VPN : https://community.checkpoint.com/t5/Visibility-Analytics/SmartView-VPN-Client-enhanced-view/m-p/7887...
Designed to provide
- total time spend on VPN
- transferred total bytes.
- number of logs
- blade used
- client used for connection (workspace, endpoint, snx, etc)
- login fails and realauth schemes
Have a look over on this page too for some more details in reporting for VPN : https://community.checkpoint.com/t5/Visibility-Analytics/SmartView-VPN-Client-enhanced-view/m-p/7887...
Designed to provide
- total time spend on VPN
- transferred total bytes.
- number of logs
- blade used
- client used for connection (workspace, endpoint, snx, etc)
- login fails and realauth schemes
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I already reviewed the link you posted, but there are no any references regarding concurrent users.
Talking with a TAC Engineer, he told me that it seems there are not any method to get concurrent users from SmartEvent. It seems that this information is only available on the Gateway.
Thanks.
Jacopo
I already reviewed the link you posted, but there are no any references regarding concurrent users.
Talking with a TAC Engineer, he told me that it seems there are not any method to get concurrent users from SmartEvent. It seems that this information is only available on the Gateway.
Thanks.
Jacopo
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
That is indeed the information I also got from R&D when I was trying to get the user numbers on an MDS per domain.
Regards, Maarten
That is indeed the information I also got from R&D when I was trying to get the user numbers on an MDS per domain.
Regards, Maarten
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Peter,
Have tried this in lab and worked well.
However, integrating it in production (200+ RA users), hence, more users and log data causes the cpu to max out and ultimately to SmartLog/SmartEvent to fail.
Only recovering it with a evstop ; evstart, or waiting many hours.
This might probably be the reason: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
Do you know of any successful use cases in production environments?
In which case i may raise a SR to tac to see if there is something else going on with my Management.
Hi Peter,
Have tried this in lab and worked well.
However, integrating it in production (200+ RA users), hence, more users and log data causes the cpu to max out and ultimately to SmartLog/SmartEvent to fail.
Only recovering it with a evstop ; evstart, or waiting many hours.
This might probably be the reason: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
Do you know of any successful use cases in production environments?
In which case i may raise a SR to tac to see if there is something else going on with my Management.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There is a SmartEvent License needed to use this feature, right ?
There is a SmartEvent License needed to use this feature, right ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes, these reports require a SmartEvent license.
Yes, these reports require a SmartEvent license.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
My dash is with transferred total bytes in O, Can you help me?
My dash is with transferred total bytes in O, Can you help me?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to create his custom report ? can anyone explain in details R80.30.
How to create his custom report ? can anyone explain in details R80.30.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The report was attached to Peter’s original post and can be imported into R80.30.
The report was attached to Peter’s original post and can be imported into R80.30.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Monitoring applications and data volume related to remote access sessions
Following up the great work of @Tomas_Vobruba mentioning the importance of SmartView Remote Access support, I created the attached View.
It shows the how long the user was connected, which application she/he has accessed and that data volume transmitted. Check the video to learn more how you can use this view.