<!-- object_type: fw_1 object_action: graph_view -->

<H2>SLOP Help: Viewing graphical reports</H2>

<H3>How to get to this screen:</H3>
<UL>
   <LI> Login to SLOP
   <LI> Once logged in, select one of your Checkpoint Firewall-1 objects 
        to work with
   <LI> After you have selected an object and are in the main interface, 
        click the <B>View graphical reports</B> link under the Internet
        Security banner
</UL>

<H3>What this screen tells you:</H3>
The first thing that should catch your eye on this screen is a plot of
event occurance from your firewall.  This chart shows, for the selected
period of time, the following data:<BR>
<UL>
  <LI> <B>Total Events</B>:  This plot shows the total number of events that the
      firewall logged at the given time.
  <LI> <B>Accepted Events</B>:  This plot shows the number of events where the
      firewall accepted traffic
  <LI> <B>Encrypted Events</B>:  This plot shows the number of events where the
      firewall encrypted traffic for a VPN.  Obviously you will only see
      activity for "Encrypted Events" and "Decrypted Events" If you are
      running a VPN on your firewall.
  <LI> <B>Decrypted Events</B>:  This plot shows the number of events where the
      firewall decrypted traffic for a VPN.  Again, you will only see
      activity for "Encrypted Events" and "Decrypted Events" If you
      arerunning a VPN on your firewall.
  <LI> <B>Rejected Events</B>:  This plot shows the number of times your
      firewall "rejected" traffic.  "Rejected" means the firewall
      actively sent the packet back to where it came from, whereas for a
      "Dropped" event the firewally simply sends the traffic to the bit
      bucket.
  <LI> <B>Dropped Events</B>:  This plot shows the number of times your firewall
      "dropped" traffic.
  <LI> <B>Dual Y Axis</B>: The Y axis on the left-hand side of the chart
      represents the scale for <B>Total, Accepted, Encrypted, and Decrypted
      events</B>.  The scale is used by <B>Rejected and Dropped events</B>.
</UL>
<P>
Under the graph you will find a table displaying the IP address which
was logged most frequently for each of the above categories, along with
a count of how many times that IP address was seen.<P>

The last item on the view graph page is a dialog which allows you to
select a specific timeframe to display the events plot for.  By
selecting the appropriate radio button and date range, you can do one of
the following:
<UL>
   <LI> <B>Last X days</B>:  By selecting the first radio button and either 1,
	2, 7, or 30 days and then clicking the "Graph" button, you can
	directo SLOP to generate a plot for the last X days, as you
	have selected.
   <LI> <B>Range of dates</B>:  By selecting the second radio button and then a
	start and end date, followed by the "Graph" button, you can
	direct SLOP to generate a plot for a specific range of dates.
	Note, the dates which SLOP allows you to select from are dates
	that SLOP has firewall data for.
</UL>