topic Re: ACCESS RULE POLICY in Firewall and Security Management

ACCESS RULE POLICY

Capt_Mundo — Sun, 21 May 2023 15:44:17 GMT

Hi Team,

I placed my access rule policy for blacklisted IP addresses at the top of the access rule. My group object for blacklisted IP addresses contains numerous IP addresses. Will there be any issues with the runtime for traffic to pass through?

Thank you

Re: ACCESS RULE POLICY

Yashsmk — Sun, 21 May 2023 17:18:23 GMT

Hi Team,

You will not get any issue for this.

IP block rule or advisory(for blocking IP or URL) should be on top of the rule base.

Note: Unused objects and duplicate objects will increase the policy verification time. Avoid creating duplicate objects and delete unnecessary objects. Cleaning up these objects can greatly improve the overall policy installation time.

https://support.checkpoint.com/results/sk/sk102812

Re: ACCESS RULE POLICY

G_W_Albrecht — Sun, 21 May 2023 19:13:32 GMT

See here: https://community.checkpoint.com/t5/Management/Management-has-0-17Million-Blacklist-IPs-in-DB/m-p/122578

Re: ACCESS RULE POLICY

the_rock — Sun, 21 May 2023 22:00:42 GMT

Just follow what @G_W_Albrecht gave you.