CHECKPOINT FIREWALL-1 (FW LOG -FTN EXPORT)
Sawmill is a Checkpoint Firewall-1 (fw log -ftn export) log analyzer (it also supports the 1021 other log formats listed to the left).
It can process log files
in Checkpoint Firewall-1 (fw log -ftn export) format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse Checkpoint Firewall-1 (fw log -ftn export) logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform Checkpoint Firewall-1 (fw log -ftn export) log analysis on any platform, including Windows, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for Checkpoint Firewall-1 (fw log -ftn export), generates reports for each field, and allows dynamic filtering on any combination of these fields:
| Field | | Internal Name |
| date/time | | date_time |
| day of week | | day_of_week |
| hour of day | | hour_of_day |
| action | | action |
| host | | host |
| interface | | interface |
| product | | product |
| source | | source |
| source port | | source_port |
| destination | | destination |
| protocol | | protocol |
| service | | service |
| rule | | rule |
| Rule UID | | rule_uid |
| message info | | message_info |
| SmartDefense | | smart_defense |
| segment_time | | segment_time |
| service ID | | service_id |
| start time | | start_time |
| server_outbound_interface | | server_outbound_interface |
| user | | user |
Sawmill stores the following numerical fields in its database for Checkpoint Firewall-1 (fw log -ftn export), aggregating them and including them as columns in most reports:
| Numerical Field | | Internal Name |
| accesses | | accesses |
| bytes | | bytes |
| packets | | packets |
| Client Inbound Bytes | | client_inbound_bytes |
| Client Inbound Packets | | client_inbound_packets |
| Client Outbound Bytes | | client_outbound_bytes |
| Client Outbound Packets | | client_outbound_packets |
| elapsed | | elapsed |
| Server Inbound Bytes | | server_inbound_bytes |
| Server Inbound Packets | | server_inbound_packets |
| Server Outbound Bytes | | server_outbound_bytes |
| Server Outbound Packets | | server_outbound_packets |
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling Checkpoint Firewall-1 (fw log -ftn export) reports.
Sawmill also supports 1021 other log formats.