<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Policy Audit Extension in SmartConsole Extensions</title>
    <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272923#M627</link>
    <description>&lt;P&gt;&lt;a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/57441"&gt;@israelsc&lt;/a&gt;:&lt;/P&gt;
&lt;P&gt;Great questions — privacy and security are absolutely valid concerns when introducing any third-party tooling into a management environment, so let me walk through exactly how this extension works.&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;&lt;EM&gt;What does the extension actually do?&lt;/EM&gt;&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;This Policy Audit extension consists of just two files: a JSON manifest and a single HTML file. There is no backend, no installer, no service, and no external dependency. Once loaded, it runs entirely inside SmartConsole itself — the same way the built-in &lt;A href="https://sc1.checkpoint.com/documents/latest/APIs/#gui-cli/" target="_self"&gt;SmartConsole CLI&lt;/A&gt; works. It uses SmartConsole's native API bridge to issue read-only commands (e.g. show packages, show access-rulebase), iterates through the results using local JavaScript functions, and renders the findings visually inside the SmartConsole panel. That's it.&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;&lt;EM&gt;No external access — by design and by architecture&lt;/EM&gt;&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;The manifest explicitly declares only two &lt;A href="https://sc1.checkpoint.com/documents/SmartConsole/Extensions/index.html#Extension%20Permissions" target="_self"&gt;permissions&lt;/A&gt;:&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;&lt;CODE&gt;get-read-only-session&lt;/CODE&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;CODE&gt;run-read-only-commands&lt;/CODE&gt;&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;These are the only capabilities SmartConsole grants to the extension. With these permissions, the extension cannot write, modify, install, or publish any policy. It can only read — and it has no mechanism to send anything anywhere.&amp;nbsp;There is no external URL, no telemetry, no analytics call, and no server of any kind receiving data. The single readable HTML file itself can be inspected in any text editor to verify this and is therefore&amp;nbsp;fully auditable.&lt;/P&gt;
&lt;P&gt;Furthermore, since the extension runs inside SmartConsole's sandboxed extension frame, it cannot reach external network destinations even if someone tried to modify it to do so — the SmartConsole process controls what the extension can communicate with.&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;&lt;EM&gt;Full transparency via Commit mode&lt;/EM&gt;&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;For customers who want complete visibility into every API call the extension makes, there is a built-in "Commit mode" toggle. In this mode, every read request is shown to the user in a dialogue box before it is executed, requiring explicit confirmation. This gives administrators a full, step-by-step audit trail of exactly what data the extension accesses — nothing runs silently in the background.&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;&lt;EM&gt;How to uninstall&lt;/EM&gt;&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;Removing the extension is straightforward:&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;Via SmartConsole: Manage &amp;amp; Settings &amp;gt; Preferences &amp;gt; SmartConsole Extensions, then delete the entry.&lt;/LI&gt;
&lt;LI&gt;Manually: remove the extension entry from AddOnsConfig.json, found at:&lt;BR /&gt;%localappdata%\Check Point\SmartConsole\R8*\UserSettings (standard installation);&lt;BR /&gt;or the Output sub-folder of your SmartConsole Portable directory&lt;/LI&gt;
&lt;/UL&gt;</description>
    <pubDate>Tue, 10 Mar 2026 07:02:26 GMT</pubDate>
    <dc:creator>Danny</dc:creator>
    <dc:date>2026-03-10T07:02:26Z</dc:date>
    <item>
      <title>Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272730#M605</link>
      <description>&lt;P style="text-align: center;"&gt;&lt;span class="lia-unicode-emoji" title=":popcorn:"&gt;🍿&lt;/span&gt;&amp;nbsp;Many checks already included&lt;BR /&gt;&lt;span class="lia-unicode-emoji" title=":speech_balloon:"&gt;💬&lt;/span&gt;&amp;nbsp;Comment to have your own checks added&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;SmartConsole Extension to add &lt;STRONG&gt;Policy Audit&lt;/STRONG&gt;, an extensible policy and objects auditing tool, to the right global pane.&lt;/SPAN&gt;&lt;BR /&gt;&lt;STRONG&gt;&lt;BR /&gt;Extension URL: &lt;A href="https://dannyjung.de/policyaudit.json" target="_self" rel="nofollow noopener noreferrer"&gt;https://dannyjung.de/policyaudit.json&lt;/A&gt;&lt;BR /&gt;&lt;BR /&gt;Installation:&lt;/STRONG&gt; SmartConsole &amp;gt; Manage &amp;amp; Settings &amp;gt; Preferences &amp;gt; SmartConsole Extensions&lt;/P&gt;</description>
      <pubDate>Fri, 06 Mar 2026 19:18:31 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272730#M605</guid>
      <dc:creator>Danny</dc:creator>
      <dc:date>2026-03-06T19:18:31Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272743#M606</link>
      <description>&lt;P&gt;That looks useful!&lt;/P&gt;</description>
      <pubDate>Fri, 06 Mar 2026 18:57:55 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272743#M606</guid>
      <dc:creator>PhoneBoy</dc:creator>
      <dc:date>2026-03-06T18:57:55Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272750#M607</link>
      <description>&lt;P&gt;Wow&amp;nbsp;&lt;a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/687"&gt;@Danny&lt;/a&gt;&amp;nbsp;, AMAZING! Something I noticed, though not sure its cause I checked in R82.10 demo smart console, but I see below for stealth rule, mentions not covered for mgmt object, but odd.&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot_1.png" style="width: 400px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/33611i3A382A1D31CC0A43/image-size/medium?v=v2&amp;amp;px=400" role="button" title="Screenshot_1.png" alt="Screenshot_1.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt; &lt;/P&gt;</description>
      <pubDate>Fri, 06 Mar 2026 19:21:39 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272750#M607</guid>
      <dc:creator>the_rock</dc:creator>
      <dc:date>2026-03-06T19:21:39Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272751#M608</link>
      <description>&lt;P&gt;This looks like an amazing tool to try.&lt;/P&gt;&lt;P&gt;Time to play and review.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks Danny!&lt;/P&gt;</description>
      <pubDate>Fri, 06 Mar 2026 19:35:45 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272751#M608</guid>
      <dc:creator>enex</dc:creator>
      <dc:date>2026-03-06T19:35:45Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272756#M609</link>
      <description>&lt;P&gt;Très intéressant! Bravo Danny&lt;/P&gt;</description>
      <pubDate>Fri, 06 Mar 2026 21:13:05 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272756#M609</guid>
      <dc:creator>XavierBens</dc:creator>
      <dc:date>2026-03-06T21:13:05Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272759#M610</link>
      <description>&lt;P&gt;Its brilliant! Even lets you choose different policy packages as well, so many awesome options.&lt;/P&gt;</description>
      <pubDate>Fri, 06 Mar 2026 21:54:09 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272759#M610</guid>
      <dc:creator>the_rock</dc:creator>
      <dc:date>2026-03-06T21:54:09Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272761#M611</link>
      <description>&lt;P&gt;Nice Danny! It´s a powerfull tool!&lt;/P&gt;</description>
      <pubDate>Fri, 06 Mar 2026 22:44:38 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272761#M611</guid>
      <dc:creator>murilomuinhos</dc:creator>
      <dc:date>2026-03-06T22:44:38Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272781#M612</link>
      <description>&lt;P&gt;That was a super cool addon in terms of cybersecurity assesments.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;thank you&lt;/P&gt;</description>
      <pubDate>Sat, 07 Mar 2026 21:23:03 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272781#M612</guid>
      <dc:creator>Julio_Carrillo</dc:creator>
      <dc:date>2026-03-07T21:23:03Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272783#M613</link>
      <description>&lt;P&gt;Very nice good idea!&lt;/P&gt;</description>
      <pubDate>Sun, 08 Mar 2026 00:46:59 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272783#M613</guid>
      <dc:creator>Edyspbrazil</dc:creator>
      <dc:date>2026-03-08T00:46:59Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272788#M614</link>
      <description>&lt;P&gt;That’s amazing, &lt;a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/687"&gt;@Danny&lt;/a&gt;&amp;nbsp;! It will be extremely useful.&lt;/P&gt;&lt;P&gt;Many thanks!&lt;/P&gt;</description>
      <pubDate>Sun, 08 Mar 2026 07:33:50 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272788#M614</guid>
      <dc:creator>HectorCoimbra</dc:creator>
      <dc:date>2026-03-08T07:33:50Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272794#M615</link>
      <description>&lt;P&gt;Hi Danny,&lt;/P&gt;&lt;P&gt;one thing I noticed as an improvment:&lt;/P&gt;&lt;P&gt;An Any-Any Rule with Action "inner layer" should not be shown in my point of view. Rules within an layer should anyways.&lt;/P&gt;&lt;P&gt;Best,&lt;/P&gt;&lt;P&gt;Markus&lt;/P&gt;</description>
      <pubDate>Sun, 08 Mar 2026 12:31:49 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272794#M615</guid>
      <dc:creator>Markus1634</dc:creator>
      <dc:date>2026-03-08T12:31:49Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272802#M616</link>
      <description>&lt;P&gt;Very nice tool congrats for sharing&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sun, 08 Mar 2026 13:07:49 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272802#M616</guid>
      <dc:creator>Edyspbrazil</dc:creator>
      <dc:date>2026-03-08T13:07:49Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272807#M617</link>
      <description>&lt;P&gt;Wow, it's awesome!&lt;/P&gt;</description>
      <pubDate>Sun, 08 Mar 2026 18:49:37 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272807#M617</guid>
      <dc:creator>sjni01</dc:creator>
      <dc:date>2026-03-08T18:49:37Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272810#M618</link>
      <description>&lt;P&gt;Never noticed that the other day Markus, but definitely logical suggestion, in my opinion.&lt;/P&gt;</description>
      <pubDate>Sun, 08 Mar 2026 21:30:35 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272810#M618</guid>
      <dc:creator>the_rock</dc:creator>
      <dc:date>2026-03-08T21:30:35Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272828#M619</link>
      <description>&lt;P&gt;Hi&amp;nbsp; Danny&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I've tried with Smartconsole R81.20 Last take 81.20.9700.675, but not detect the policy and when I display the options appear the re-luck the smartconsole.&lt;BR /&gt;&lt;BR /&gt;however, in r82.10 working fine!&lt;/P&gt;</description>
      <pubDate>Mon, 09 Mar 2026 10:01:41 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272828#M619</guid>
      <dc:creator>ITTech</dc:creator>
      <dc:date>2026-03-09T10:01:41Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272847#M620</link>
      <description>&lt;P&gt;Really helpful for Policy review and Health Check..Amazing&lt;/P&gt;</description>
      <pubDate>Mon, 09 Mar 2026 10:58:03 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272847#M620</guid>
      <dc:creator>kamaladmire1</dc:creator>
      <dc:date>2026-03-09T10:58:03Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272848#M621</link>
      <description>&lt;P&gt;Danny, please don't forget to claim this for MVP points&lt;/P&gt;</description>
      <pubDate>Mon, 09 Mar 2026 10:58:24 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272848#M621</guid>
      <dc:creator>_Val_</dc:creator>
      <dc:date>2026-03-09T10:58:24Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272905#M622</link>
      <description>&lt;P&gt;Hi Danny, this is really great. Love the tool so far. Quick question I was checking out the SSH service check, found a significant amount of old vs ssh_v2 usage. It says to use the replace option, where is that? I also see a commit button at the bottom, can you explain that for me ?&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks&lt;BR /&gt;Doug&lt;/P&gt;</description>
      <pubDate>Mon, 09 Mar 2026 20:12:05 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272905#M622</guid>
      <dc:creator>DP7</dc:creator>
      <dc:date>2026-03-09T20:12:05Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272912#M623</link>
      <description>&lt;P&gt;&lt;a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/133121"&gt;@DP7&lt;/a&gt;&amp;nbsp;: To replace &lt;CODE&gt;ssh&lt;/CODE&gt;, run &amp;lt;Where Used&amp;gt;,&amp;nbsp;then click on &amp;lt;Replace&amp;gt;, select &lt;CODE&gt;ssh_version_2&lt;/CODE&gt; as replacement, check &amp;lt;Objects&amp;gt; and &amp;lt;Policies&amp;gt; and click on &amp;lt;Replace&amp;gt;. Enjoy.&lt;BR /&gt;&lt;BR /&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="replace3.png" style="width: 751px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/33648i0AEC4D5907378689/image-size/large?v=v2&amp;amp;px=999" role="button" title="replace3.png" alt="replace3.png" /&gt;&lt;/span&gt;&lt;BR /&gt;&lt;BR /&gt;Commit mode just activates &lt;CODE&gt;request-commit&lt;/CODE&gt;, so users can choose the review and commit every API request performed by the extension. Try it out. You can always switch back to auto mode.&lt;/P&gt;</description>
      <pubDate>Mon, 09 Mar 2026 22:57:13 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272912#M623</guid>
      <dc:creator>Danny</dc:creator>
      <dc:date>2026-03-09T22:57:13Z</dc:date>
    </item>
    <item>
      <title>Re: Policy Audit Extension</title>
      <link>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272913#M624</link>
      <description>&lt;P&gt;&lt;a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/107908"&gt;@Markus1634&lt;/a&gt;&amp;nbsp;: This is fixed now in version v1.1, so please try again.&lt;/P&gt;</description>
      <pubDate>Tue, 10 Mar 2026 00:07:14 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/SmartConsole-Extensions/Policy-Audit-Extension/m-p/272913#M624</guid>
      <dc:creator>Danny</dc:creator>
      <dc:date>2026-03-10T00:07:14Z</dc:date>
    </item>
  </channel>
</rss>

