One of FireWall-1's unique capabilities is the graphical log-viewing engine which provides the ability to track and consolidate every communication attempt and valid connection made on security gateways distributed throughout the system. All communication information is recorded, including the time, date, protocol and services attempted, action taken (accepted, rejected, dropped, encrypted, etc.), source and destination, user, packet length, and when applicable, encryption keys and user names. Protocol specific information is also included. Graphical viewing and analysis tools enable real-time and historical audits, enable detection of security break-in attempts, and ensure that any suspicious network activity can be traced and monitored. Check Point Software's programming language, INSPECT, allows managers to extend standard log formats and define new formats to match specific needs.

Detailed Reporting

FireWall-1's log viewer is matched by a comprehensive query and reporting engine. Custom reports can be generated easily simply by selecting any of the fields from the log viewing engine. In addition, log file data is readily exportable to third-party reporting applications, such as spread-sheets or trouble-ticketing systems.

Secure and Efficient Processing

Log information is authenticated, encrypted and signed to enhance the security of sensitive auditing information. It is then stored in an efficient and condensed mode, so that hundreds of thousands of log records can be processed and stored without degrading system performance or requiring excessive disk space. A suite of log file utilities is provided.

FireWall-1 supports SNMP v2 and provides an open interface to easily coexist with and compliment existing security products and other related applications such as accounting, billing, and network activity auditing. In addition, FireWall-1 provides an optional management module for integrated management and control of router access tables for Bay Networks and Cisco Systems routers.

System Viewer. The status of every security gateway distributed througout the enterprise can be seen at a glance. Statistical counters track the number of packets inspected, rejected, and logged.