CHECKPOINT FIREWALL-1 VIA SYSLOG
Sawmill is a Checkpoint Firewall-1 via Syslog log analyzer (it also supports the 1021 other log formats listed to the left).
It can process log files
in Checkpoint Firewall-1 via Syslog format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse Checkpoint Firewall-1 via Syslog logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform Checkpoint Firewall-1 via Syslog log analysis on any platform, including Windows, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for Checkpoint Firewall-1 via Syslog, generates reports for each field, and allows dynamic filtering on any combination of these fields:
| Field | | Internal Name |
|---|
| | action | | action |
| | module | | module |
| | direction | | direction |
| | interface | | interface |
| | rule | | rule |
| | Rule UID | | rule_uid |
| | source | | src |
| | destination | | dst |
| | protocol | | proto |
| | translated source | | xlatesrc |
| | NAT rule number | | nat_rulenum |
| | NAT additional rule number | | nat_addtnl_rulenum |
| | product | | product |
| | server | | server |
| | source port | | s_port |
| | translated source port | | xlatesport |
Sawmill stores the following numerical fields in its database for Checkpoint Firewall-1 via Syslog, aggregating them and including them as columns in most reports:
| Numerical Field | | Internal Name |
|---|
| | events | | events |
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling Checkpoint Firewall-1 via Syslog reports.
Sawmill also supports 1021 other log formats.
