|
Reporting Module
Meaningful Reports
As Check Point protects your network,
they record a wealth of information about the traffic that they secure.
The Check Point Reporting Module turns this information into reports that
simplify decision making by making it easy to understand what’s happening
on your network.
Get Answers to Your Questions
How many unauthorized attempts are made
to access resources on your network? Do some "repeat offenders" keep trying?
What network services are most in demand on your network? Is web traffic
still on the rise? The Reporting Module answers these questions and more
by presenting critical facts and relationships in simple, easy to understand
reports.
The Challenge:
Today’s enterprise networks
increasingly extend across the Internet to connect customers, partners,
and remote users. To effectively manage large networks, security managers
need a comprehensive and clear picture of how their network is being used.
Check Point Software Technologies' log file entries contain a wealth of
information to help security managers develop a detailed picture. However,
as increasing traffic drives a growth in the amount of log data, it becomes
difficult to make well-informed security and networking decisions straight
from log file data.
The Solution:
Check Point Software Technologies
solves the problem of turning log data into actionable information with
its Reporting Module, a complete reporting system that delivers security
audit, trend, and cost information from log data. Tightly integrated with
VPN-1/FireWall-1 and FloodGate-1, the Reporting Module leverages previously
defined objects to produce pre-defined and custom reports.
Flexible Reporting
The Reporting Module delivers
audit, trend, and cost information from log file entries by presenting
critical facts and relationships in simple, easy-to-understand reports.
Each log file entry contains multiple attributes, all of which include
important network, security, and accounting data. The Reporting Module's
flexible consolidation, report definition, and report distribution capabilities
transform this data into reports accessible to all levels of decision makers.
| Product Features |
-
Presents audit, trend, and cost
information in easy-to-understand reports
-
Generates pre-defined and custom
reports
-
Filters and consolidates log
data based on user-defined policies
-
Distributes reports automatically
to a printer, email address, file, or application
-
Reuses network objects and administrator
information
|
|
| Product
Benefits |
-
Supports security and networking
decision making
-
Enables novice and expert users
to create useful reports
-
Minimizes data storage requirements
and report generation times
-
Automatically delivers information
to the right people in the right format
-
Eases management and use by
leveraging previously defined resources
|
Decision Support
The Reporting Module provides
a powerful solution for generating reports that present the right information,
in the right format, to the right people. And, with nearly 20 pre-defined
reports, that power is
accessible even to novice users.
The Reporting Module's flexible
user interface is used to specify report contents, format, administrator
permissions, and delivery options. Reports can include any or all log file
attributes, and can be formatted as text tables or as line, bar, and pie
graphs.
Reports can be delivered
to the user interface, a web server, a printer, an email address, a file,
or a user-specified application. Reports delivered outside of the user
interface can be sent in HTML, ASCII or the Reporting Module's native format.
Easy report definition and
distribution make the Reporting Module a powerful decision support system.
Filtering and Consolidation
The Reporting Module includes
a time and space-saving Consolidator Engine. Leaving the original log file
completely intact, the Consolidator Engine applies a user-defined policy
to minimize database storage requirements for report data by selecting
whether to include log entries as is, consolidate them, or ignore them.
Since the original log file data remains unmodified, if reports need to
be created from data that was excluded by the Consolidator Engine, policy
rules can simply be edited and log data re-consolidated.
Used for creating and modifying
consolidation policy, the Log Consolidator Policy Editor is similar in
appearance and use to the VPN-1/ FireWall-1 Security Policy Editor, making
it easy to learn and use.
Tight Integration
The Reporting Module is
tightly integrated with Check Point products, making it easy to learn,
use, and manage. The Reporting Module retrieves network objects, services,
users, and administrator information from the Management Server. This makes
generating a report about a service defined in VPN-1, for example, as straightforward
as selecting the desired service from a list of services in the Reporting
Module user interface. Shared administrator information ensures that specifying
report definition, generation, and viewing privileges for different administrators
is as simple as possible.
Log Consolidator Policy
Editor
The Log File Policy Editor
has the familiar look and feel of the VPN-1/FireWall-1 Security Policy
Editor. Network objects, services, and users are all drawn from the Check
Point Management Server, making rule definition straightforward.
Actions to be performed on
log entries include Ignore and Store. For log entries that are stored,
the Store Properties dialog box specifies whether log entries are stored
as is, preserving all attributes within the entry, or whether and how they
are to be consolidated.
Reporting Module User
Interface
Define and generate reports
using a flexible and powerful user interface that is easy to understand
and use. Like the Log Consolidator Policy Editor, the user interface leverages
previously defined network objects, services, and users, so defining and
refining reports is intuitive.
| Specifications |
Operating Systems |
Reporting Server
Microsoft Windows NT
(x86 architecture only)
NTFS file system recommended
Reporting Client
Microsoft Windows NT (x86
architecture only)
Microsoft Windows 95, 98 |
Platforms
Reporting Server Intel x86
(Pentium II 233 MHz or higher)
Reporting Client Intel x86
(Pentium or higher)
Disk Space
Reporting Server 4 GB (Includes
space for report
storage and generation) Reporting Client 10 MB
Memory
Reporting Server 128 MB
Reporting Client 32 MB
Media CD-ROM
Support
VPN-1 or FireWall-1 Version
4.0, SP2 or higher
|
|