To support SmartLog or SmartView Tracker reporting for all supported servers (except R80.20), you must update the log schema. Follow instructions in sk106662.
Starting from E80.85, SandBlast Agent improves coverage of malicious threats by sending anonymized incident related data to the Check Point Threat Cloud. This feature is turned on by default. For more information, including how to disable this feature, refer to sk129753.