CHECKPOINT FIREWALL-1 NG FULL
Sawmill is a Checkpoint Firewall-1 NG Full log analyzer (it also supports the 980 other log formats listed to the left).
It can process log files
in Checkpoint Firewall-1 NG Full format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse Checkpoint Firewall-1 NG Full logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform Checkpoint Firewall-1 NG Full log analysis on any platform, including Window, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for Checkpoint Firewall-1 NG Full, generates reports for each field, and allows dynamic filtering on any combination of these fields:
|Field|| ||Internal Name|
| ||date/time|| ||date_time|
| ||day of week|| ||day_of_week|
| ||hour of day|| ||hour_of_day|
| ||product|| ||product|
| ||interface|| ||interface|
| ||origin|| ||origin|
| ||type|| ||type|
| ||action|| ||action|
| ||service|| ||service|
| ||source host|| ||source_host|
| ||destination host|| ||destination_host|
| ||protocol|| ||protocol|
| ||rule|| ||rule|
| ||source port|| ||source_port|
| ||user|| ||user|
| ||translated source|| ||translated_source|
| ||translated destination|| ||translated_destination|
| ||translated source port|| ||translated_source_port|
| ||translated destination port|| ||translated_destination_port|
| ||partner|| ||partner|
| ||info|| ||info|
Sawmill stores the following numerical fields in its database for Checkpoint Firewall-1 NG Full, aggregating them and including them as columns in most reports:
|Numerical Field|| ||Internal Name|
| ||hits|| ||hits|
| ||visitors|| ||visitors|
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling Checkpoint Firewall-1 NG Full reports.
Sawmill also supports 980 other log formats.