topic Re: Policy verification erroe in Firewall and Security Management

Policy verification erroe

Vineethkumar — Thu, 01 Jun 2023 05:02:45 GMT

Hi all,

I'm a beginner in the checkpoint infrastructure. When I was pushing the rules to security gateway, I'm facing policy verification error issue as following. It is showing as "Rule X hides rule Y for service applications kerberos and domain udp. What does that mean? Can someone help me to sort out this issue.
Please refer the attachment for better understanding

Tal_Paz-Fridman — Thu, 01 Jun 2023 05:20:14 GMT

Hiding rules are basically identical rules or if ones where one is included (subset) of another.

We alert so that you can fine tune your policy and reduce the overall number of rules.

You can disable (or enable) this option using sk161574 https://support.checkpoint.com/results/sk/sk161574

Policy verification does not alert about rules that hide other rules