topic Re: Supervision of Check Point Firewall in General Topics

Supervision of Check Point Firewall

Di_Junior — Wed, 20 May 2020 21:25:37 GMT

Dear Mates

We have a large check point infrastructure and we wish to give some tasks to our supervision which also happens to be the first level of support in the company. I would like to know based on your experience or the company you work for, how are things segregated. For example I don't want them to do any configuration, so what tasks should I give to a supervision which is also the first level of support.

Thanks in advance

Re: Supervision of Check Point Firewall

Chris_Atkinson — Thu, 21 May 2020 12:40:00 GMT

Some suggestions:

1.) Monitoring of SmartView Dashboards via Web browser / Wall boards.

2.) Leverage APIs to abstract / automate other tasks via Web services.

3.) Health & availability monitoring via NMS etc

Re: Supervision of Check Point Firewall

Timothy_Hall — Thu, 21 May 2020 14:52:54 GMT

I suppose you could give them a SmartConsole login with a read-only permissions profile, but I would be concerned about user privacy by letting them look at logs/reports. You can create a custom permissions profile that would only give them access to the Gateways & Servers and Security Policies tabs read-only. This would let them see the status and utilization of gateways as well as look at security policies to determine if a certain type of traffic is allowed. There isn't really a need to grant access to the Manage & Settings tab either in my opinion.

Re: Supervision of Check Point Firewall

Di_Junior — Fri, 22 May 2020 08:33:15 GMT

Thanks Tim

Re: Supervision of Check Point Firewall

Di_Junior — Fri, 22 May 2020 08:33:38 GMT

Thanks Chris