Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
jnoble
Participant

How to download an attachment removed by checkpoint?

Hi,

 

One of our users received an email with .mp3 extension from our client and the attachment was removed by checkpoint.

 

Is there a way to retrieve it?

 

Thanks.

0 Kudos
4 Replies
PhoneBoy
Admin
Admin

If I'm not mistaken, these attachments aren't saved anywhere.
There may be hints in the log files referred to here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
0 Kudos
Dilian_Chernev
Collaborator

Open the Summary report from logs and download it from there: 

te_report_download.png

 

Password for the archive should be: infected

0 Kudos
jnoble
Participant

Hi Dilian,

 

Can you give me the steps in detail?

Is there a built in summary report?

Thanks.

 

 

0 Kudos
Dilian_Chernev
Collaborator

Yes, for every "malicious" file there should be a Summary and Detailed per OS reports.

First locate the blocked connection in logs:

te_logs.png

Second: open the log record and check the summary report. It is best viewed with Chrome/Firefox.

te_summary.png

Third: will see the Summary report and can download prevented file, as on my first post.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events