Firewall OS Monitoring

Firewall OS Monitoring extends SecureTrack's capabilities into the realm of actual device configuration changes, as well as monitoring the devices' performance and health. Firewall OS Monitoring is supported for Check Point gateways on supported operating systems using SNMPv3, and requires a separate license in SecureTrack.

The combination of SecureTrack's policy revision information and Firewall OS monitoring gives administrators and auditors a complete picture of any change that occurred on the firewall.

SecureTrack periodically connects to monitored firewall devices via SNMPv3, and retrieves different types of data:

• OS-level configuration data, such as interfaces, routing tables, file system partitions, etc.
• Real-time performance data, such as CPU and disk utilization

This information is obtained from periodic SNMPv3 connections to monitored Check Point gateways. Whenever a configuration change is made, SecureTrack records a new OS-level revision, and sends out detailed change reports to designated SecureTrack users. In addition, users can view performance graphs for each monitored firewall, and configure real-time alerts based on OS-related thresholds.

The Firewall OS Monitoring information is arranged in a number of tabs: