topic Re: rule base analysis in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/172367#M69442 <P>Chris are there any new templates created for Smartview/Reporter?&nbsp;<BR />I'm specifically after a template that will generate a report giving me a summary of rules created and deleted per policy.</P> Wed, 22 Feb 2023 16:22:51 GMT genisis__ 2023-02-22T16:22:51Z rule base analysis https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/170783#M69438 <P><SPAN>R81 SmartReporter : how to do a report "rule base analysis"? is it possible ?</SPAN></P> Wed, 08 Feb 2023 20:49:25 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/170783#M69438 GomesLucas 2023-02-08T20:49:25Z Re: rule base analysis https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/170784#M69439 <P>I believe you're looking to optimize the rule base is that correct? Duplicate services? Objects? Moving rules around? If so SmartEvent/Reporter are not going to provide that information.&nbsp;</P> Wed, 08 Feb 2023 21:16:37 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/170784#M69439 CE_SE 2023-02-08T21:16:37Z Re: rule base analysis https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/170785#M69440 <P>We have some capabilities to look into Firewall rules and match against checkpoint best practices by using the Compliance Blade.</P> <P>&nbsp;</P> <P><A href="https://www.youtube.com/watch?v=iT2aF3LCi-U" target="_blank">https://www.youtube.com/watch?v=iT2aF3LCi-U</A></P> <P>&nbsp;</P> Wed, 08 Feb 2023 22:21:11 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/170785#M69440 RobertoQ 2023-02-08T22:21:11Z Re: rule base analysis https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/170787#M69441 <P>In R77 days and earlier there was a basic "Rule Base Analysis" report in SmartReporter but this is no longer present in R80.x.</P> <P>Looking at rule hitcounts is an option to start refer also:</P> <P>sk64143 - Tips to optimize your security management database</P> <P>Alternatively Check Point PS can assist with a more detailed SmartOptimize service.</P> <P><A href="https://www.checkpoint.com/downloads/support-services/smartoptimize-sample-report.pdf" target="_blank">https://www.checkpoint.com/downloads/support-services/smartoptimize-sample-report.pdf</A></P> <P><A href="https://www.checkpoint.com/downloads/support-services/smartoptimize-datasheet.pdf" target="_blank">https://www.checkpoint.com/downloads/support-services/smartoptimize-datasheet.pdf</A></P> Wed, 08 Feb 2023 22:51:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/170787#M69441 Chris_Atkinson 2023-02-08T22:51:09Z Re: rule base analysis https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/172367#M69442 <P>Chris are there any new templates created for Smartview/Reporter?&nbsp;<BR />I'm specifically after a template that will generate a report giving me a summary of rules created and deleted per policy.</P> Wed, 22 Feb 2023 16:22:51 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/172367#M69442 genisis__ 2023-02-22T16:22:51Z Re: rule base analysis https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/172368#M69443 <P>Compliance blade is your best friend here. As guys said, smart event wont help much here, sadly.</P> Wed, 22 Feb 2023 16:35:15 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/172368#M69443 the_rock 2023-02-22T16:35:15Z Re: rule base analysis https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/172382#M69444 <P>Have you checked if the "change report" meets requirements?</P> <P><A href="https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/MicroContent/Resources/MicroContent/MicroContent_SECMG/Changes_Report/Changes-Report.htm" target="_blank">https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/MicroContent/Resources/MicroContent/MicroContent_SECMG/Changes_Report/Changes-Report.htm</A></P> Wed, 22 Feb 2023 19:02:18 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/172382#M69444 Chris_Atkinson 2023-02-22T19:02:18Z Re: rule base analysis https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/172386#M69445 <P>Will check it out, thanks.</P> Wed, 22 Feb 2023 21:35:20 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/172386#M69445 genisis__ 2023-02-22T21:35:20Z Re: rule base analysis https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/172387#M69446 <P>it not quite what I want Chris, but thanks.</P> Wed, 22 Feb 2023 21:36:14 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/rule-base-analysis/m-p/172387#M69446 genisis__ 2023-02-22T21:36:14Z