Chapter 9: Tracking and Alerts

Introduction

One important part of firewall security is being aware of what traffic is going through your firewall. For instance, in the event that you are under an attack, you will be able to react appropriately. Check Point VPN-1/FireWall-1 (CP VPN-1/FW-1) provides you with the ability to set up alerts based on certain criteria, and you can add some of these alerts directly into your rulebase under the Track column in your SmartDashboard. You can even decide what action to take if a certain alert is raised.

Check Point is continually praised for the usability and richness of its logging. Using SmartView Tracker, an administrator can easily track down problems, misconfigurations, or simply audit and analyze the network traffic in a concise manner from a single location. You can also receive, consolidate, and correlate logs from other devices, increasing the overall effectiveness of the logs shown in SmartView Tracker.