topic Prefix Lists? in Firewall and Security Management

Prefix Lists?

Joshua_Wright — Wed, 21 Feb 2018 16:15:27 GMT

Does Check Point have Prefix-Lists like in Cisco?

I would like to create a list of networks and reuse/reference that list in various Routemaps.

Re: Prefix Lists?

PhoneBoy — Fri, 23 Feb 2018 00:00:55 GMT

It's planned for R80.20.

I believe it is also enabled by the following hotfix on top of R80.10: Advanced Routing and Clustering Enhancements Hotfix for R80.10

Re: Prefix Lists?

Joshua_Wright — Sun, 25 Feb 2018 22:17:09 GMT

Thanks for the info. Real shame this isn't in already though.

I guess the Check Point Gateways aren't supposed to be used as comprehensive feature rich routers.

Re: Prefix Lists?

G_W_Albrecht — Tue, 27 Feb 2018 14:57:49 GMT

The supplied link gives a General Exception.

Re: Prefix Lists?

PhoneBoy — Thu, 01 Mar 2018 22:06:28 GMT

Not sure why it's giving a general exception... only requires Advanced access to UserCenter.

Re: Prefix Lists?

Oyvind_Bjorneru — Tue, 13 Mar 2018 07:54:54 GMT

Maybe you could use routemap and "match network". I use it in some extent in my R77.30 / Cisco environment...

Example...
set routemap PXL_test id 10 on
set routemap PXL_test id 10 allow
set routemap PXL_test id 10 match network 10.34.1.0/24 exact
set routemap PXL_test id 10 match network 10.34.2.0/24 exact

Options for "match network" is ..
all     - Match Prefix and all its subnets
between - Range for network prefix length
exact   - Match Prefix/Masklength exactly
off     - Off
refines - Match only subnets of the prefix

Re: Prefix Lists?

Joshua_Wright — Thu, 22 Mar 2018 16:36:46 GMT

This is what I am currently doing, but I want to be able to re-use the same "list" of prefixes in multiple rules and even routemaps.

The prefix-list feature in Cisco is really useful, but I will just sit tight and wait.