SmartEvent
Check Point SmartEvent provides full threat visibility with a single view into security risks. Take control and command the security event through real-time forensic and event investigation, compliance and reporting. SmartEvent correlates logs from all Check Point enforcement points, including endpoints, to identify suspicious activity, track trends and investigate/mitigate events — all through a single plane of glass. Real-time data analysis and custom event alerts notify administrators immediately for quick action and remediation.
Key Features
- Instant search results: free text search, auto suggestion and search history favorites
- Single view into security risk: R81/R82 integrated threat management and performance
- Customizable views and reports: security events automatically alert on critical events; fully modular widgets, views and reports with one-click export to PDF and Excel
- Real-time forensic and threat investigation: correlation of millions of logs to identify significant events and understand security status and trends
- From view to action: drill down directly from the event you are viewing to the immediate rule in the policy
- Schedule reports for any audience: monitor all gateways in real time with predefined or customized views, scheduled anytime
Dedicated SmartEvent Appliance Specifications
| Specification | 600-S | 600-M | 6000-L | 6000-XL |
|---|---|---|---|---|
| Managed Gateways (Base/Plus) | 5/10 | 25/50 | 75/150 | 200/400 |
| Peak Indexed Logs / Sec | 6,000 | 8,000 | 40,000 | 67,500 |
| Sustained Indexed Logs / Sec | 2,000 | 4,000 | 23,000 | |
| GB per Day of Logs | 50 | 105 | 382 | 652 |
| Cores | 12 / 16 | 32 | ||
| Storage (Hot-Swappable) | 1×2TB HDD | 2×4TB HDD | up to 12×4TB HDD | up to 12×4TB SSD |
| RAID Type | — | 1 | 5, 6, 10, 50, 60 | |
| Memory (RAM) Default/Max | 16/32 GB | 32/64 GB | 96/192 GB | 192/384 GB |
Ordering Information (dedicated SmartEvent appliances, perpetual)
| SKU | Description |
|---|---|
| CPAP-NGSM600S-BASE-EVNT / -PLUS-EVNT | Smart-1 600-S Base/Plus SmartEvent appliance (5/10 gateways) |
| CPAP-NGSM600M-BASE-EVNT / -PLUS-EVNT | Smart-1 600-M Base/Plus SmartEvent appliance (25/50 gateways) |
| CPAP-NGSM6000L-BASE-EVNT / -PLUS-EVNT | Smart-1 6000-L Base/Plus SmartEvent appliance (75/150 gateways) |
| CPAP-NGSM6000XL-BASE-EVNT / -PLUS-EVNT | Smart-1 6000-XL Base/Plus SmartEvent appliance (200/400 gateways) |
| CPAP-NGSM6000xx-MLOG-10 series | Dedicated Multi-Log appliances (75–400 gateways, 10 domains) |
The dedicated SmartEvent server is licensed by the number of gateways it analyzes and may manage no more gateways than the Security Management server. SmartEvent is also available for one year via the integrated Smart-1 appliance policy management SKUs.
Source: Check Point SmartEvent: Full Threat Visibility Data Sheet (2025).