156-215.80 · Question #437
You are the Check Point administrator for Alpha Corp with an R80 Check Point estate. You have received a call by one of the management users stating that they are unable to browse the Internet with th
The correct answer is B. Open SmartView Tracker and filter the logs for the IP address of the tablet. SmartView Tracker is the correct Check Point log analysis tool for R80, and filtering by the client's IP address is the proper targeted approach to diagnose a specific user's connectivity issue.
Question
You are the Check Point administrator for Alpha Corp with an R80 Check Point estate. You have received a call by one of the management users stating that they are unable to browse the Internet with their new tablet connected to the company Wireless. The Wireless system goes through the Check Point Gateway. How do you review the logs to see what the problem may be?
Options
- AOpen SmartLog and connect remotely to the IP of the wireless controller
- BOpen SmartView Tracker and filter the logs for the IP address of the tablet
- COpen SmartView Tracker and check all the IP logs for the tablet
- DOpen SmartLog and query for the IP address of the Manager's tablet
How the community answered
(46 responses)- A2% (1)
- B89% (41)
- C2% (1)
- D7% (3)
Why each option
SmartView Tracker is the correct Check Point log analysis tool for R80, and filtering by the client's IP address is the proper targeted approach to diagnose a specific user's connectivity issue.
SmartLog connects to a Check Point Management Server for log queries, not to a wireless controller IP, so this option describes an incorrect connection target.
SmartView Tracker is Check Point's dedicated log viewer that supports column-based filtering, making it ideal for isolating records by a specific source IP address such as the tablet's. Filtering by IP address narrows results immediately to that device's traffic, allowing the administrator to identify which rule is dropping or restricting the user's internet-bound sessions.
Reviewing all IP logs without applying any filter is an unfocused approach that does not efficiently isolate the specific tablet's traffic and is not a recommended troubleshooting workflow.
SmartLog uses a search/query interface rather than the filter-based interface of SmartView Tracker; while querying by IP is conceptually similar, SmartView Tracker is the correct tool specified by the correct answer.
Concept tested: Check Point SmartView Tracker log filtering by IP
Source: https://sc1.checkpoint.com/documents/R80/WebAdminGuides/EN/CP_R80_LoggingAndMonitoring_AdminGuide/html_frameset.htm
Topics
Community Discussion
No community discussion yet for this question.