Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
jnoble
Participant

How to download an attachment removed by checkpoint?

Hi,

 

One of our users received an email with .mp3 extension from our client and the attachment was removed by checkpoint.

 

Is there a way to retrieve it?

 

Thanks.

0 Kudos
Reply
4 Replies
PhoneBoy
Admin
Admin

If I'm not mistaken, these attachments aren't saved anywhere.
There may be hints in the log files referred to here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
0 Kudos
Reply
Dilian_Chernev
Contributor

Open the Summary report from logs and download it from there: 

te_report_download.png

 

Password for the archive should be: infected

0 Kudos
Reply
jnoble
Participant

Hi Dilian,

 

Can you give me the steps in detail?

Is there a built in summary report?

Thanks.

 

 

0 Kudos
Reply
Dilian_Chernev
Contributor

Yes, for every "malicious" file there should be a Summary and Detailed per OS reports.

First locate the blocked connection in logs:

te_logs.png

Second: open the log record and check the summary report. It is best viewed with Chrome/Firefox.

te_summary.png

Third: will see the Summary report and can download prevented file, as on my first post.

0 Kudos
Reply