Check Point Eventia Reporter

Check Point Eventia Reporter Overview:

Eventia Reporter™ is an analysis and reporting system that enables security managers to quickly sift through vast amounts of log data collected from Check Point gateways.

Administrators and security managers need a clear, comprehensive picture of how their networks are being used in order to manage them effectively and validate the effectiveness of their security policies and practices. They also need an easy way to deliver critical security intelligence to stakeholders concerned with auditing requirements and maximizing security investments. While log file entries contain a wealth of data, tracking network and security activity trends over time by manually scanning log files can be difficult and time consuming.

Eventia Reporter™, a part of the Check Point Eventia Suite, is a centralized reporting system that collects data from Check Point perimeter, internal, Web, and endpoint security gateways and delivers it in an easy-to-read, graphical format. This consistent presentation of data across the enterprise provides security administrators with end-to-end visibility into their network deployments. With Eventia Reporter, administrators can access security or network metrics more often and at a higher level to support important decisions related to resource allocation, security optimization, and regulatory compliance. Eventia Suite also includes Eventia Analyzer™ for real-time, security event correlation.

Features & Benefits:

Product Features

• Centralized reporting on network, security, and user activity
• Automatic report scheduling and distribution
• Automatic log database maintenance
• Scalability and superior performance

Product Benefits

• Centralizes access to security data for easy analysis and trending
• Demonstrates value of security investments
• Streamlines security and network activity trend reporting
• Facilitates regulatory compliance auditing

Centralized reporting
Eventia Reporter provides a large number of predefined reports that save administrative time and cost by eliminating the need to create custom reports. These reports are organized into easy-to-use categories like cross-product security and network activity, firewall security and network activity, endpoint security, and antivirus as well as product-specific reports.

Each report is further subdivided into sections that provide detailed information about a particular type of traffic or activity on the network. Also, reports can be tailored to suit the information requirements of different users. If there is a specific need not addressed by a predefined report, a security administrator easily can customize a report by adjusting the report filters to capture only the relevant data.

Automatic report distribution and database maintenance
Eventia Reporter enables administrators to schedule regular reports without constant manual intervention. Multiple reporting schedules can be maintained, making it flexible enough to meet the most demanding reporting needs. These reports can be automatically distributed to specific users via email or uploaded to ftp or Web sites.

Scalability and deployment flexibility
Eventia Reporter supports both SmartCenter™ and Provider-1® environments. In the Provider-1 environment, Eventia Reporter can be configured for global reporting or reporting targeted at a specific network segment or customer. Multiple Eventia Reporter deployments can be implemented to run in parallel, scaling to meet the reporting needs of large-scale environments. Eventia Reporter offers

Eventia Reporter provides cross-product reports. This presents the security attacks detected by SmartDefense™.

Eventia Reporter provides endpoint security as well as perimeter security reports. This report shows spyware detected on endpoint computers.

a variety of installation configurations for both large and small organizations. Where performance and deployment flexibility are key requirements, Eventia Reporter can be installed on a dedicated machine. Where cost and simplicity are the primary considerations, Eventia Reporter can be installed on the same machine as the SmartCenter or Eventia Analyzer server.

Easy trending and analysis
By automating report generation, Eventia Reporter enables organizations to efficiently capture security and network intelligence on an ongoing basis. Administrators can also generate reports to be sent to upper management for overall security performance analysis or auditing purposes.

Documentation:

Download the Check Point Eventia Reporter Datasheet (PDF).