topic Compliance Blade Question. in Firewall and Security Management

Compliance Blade Question.

Dave_Taylor1 — Thu, 17 May 2018 19:48:38 GMT

With the Compliance blade, does it provide the ability to report on unused objects?

Also can you determine what services are being used on a specific rule that has ANY applied as the service?

Re: Compliance Blade Question.

PhoneBoy — Thu, 17 May 2018 23:27:03 GMT

I don't believe you need Compliance Blade for either of these tasks.

You can get a list of unused objects here (though this generates a script to delete them): Delete Unused Hosts, Networks, and Groups

You can see what services are used for a given rule in SmartLog:

Re: Compliance Blade Question.

Tomer_Sole — Tue, 22 May 2018 19:35:11 GMT

Compliance Blade alerts you on services with Any.

It does not currently alert you on unused objects. It is planned for our next releases. For now, you can use the "show unused-objects" Management API command - Check Point - Management API reference

Re: Compliance Blade Question.

Dave_Taylor1 — Fri, 25 May 2018 13:31:56 GMT

This is good stuff! WE were hoping the compliance blade provides some of the things the more expensive auditing tools like Firemon, Tuffin or Algosec provide.