What are the features inside SmartConsole which contain integrated audit logs?

[Tomer_Sole]

How can seeing audit logs next to the various views in SmartConsole assist with decision-making?

(Please do not confuse this thread with What are the features inside SmartConsole which contain integrated log views?  )

[Tomer_Sole · Accepted solution]

The Audit Logs pane appears in the bottom of:

• Access Control rulebases - all changes for the selected rule.
• Gateways and Servers view - all audit logs that were produced for the provisioning tasks performed on the selected device.
• Revisions view (from "Manage & Settings") - all changes for the selected revision.
  
• Install Policy dialog - all changes on the selected Gateway (or all the gateways) since the last policy installation.

• Installation History view (from "Access Tools" or "Threat Tools" inside Security Policies) - all changes between 2 policy installations on the selected gateway.

• Inside Access Control rulebases, the user can select Actions-->History to see all revisions and audit logs of the current layer. This view also allows partial revert of the changes (see How do you rollback an old policy? )

"Rule Content History":

In Access Control layers, You can also select a rule and see the history of the rule as well as the history of all the objects that are used inside of its cells. This feature is called content history. In R80.10 the name will change to rule objects history.

[Martin_Raska]

Hi Tomer,

why there is missing rule number in audit logs when user create a new rule? There is only rule comment or name and when admin create the rule without it, how can I find which rule it was? I can only do "where used" with used object.

[Tomer_Sole]

Hi, see https://community.checkpoint.com/message/14410-audit-log#comment-14534