topic Re: firewall rule refinement in General Topics

firewall rule refinement

sarangoj — Tue, 25 Aug 2020 14:31:17 GMT

Hi!,

Im new in CheckPoint and i want refinement the base rules but firts i need create a report that bring me use rules statistic for analysis.

could you recommend me how to generate reports at smartevent ?
And could you recommend a process to fine tune the firewall rule base?

Thank you very much and I look forward to your collaboration!

Re: firewall rule refinement

G_W_Albrecht — Tue, 25 Aug 2020 15:00:59 GMT

Look at sk106597: Best Practices - Rulebase Construction and Optimization first

Use sk106410: How to check Top Rule Hits on Security Gateway and HitCount in rulebase

Re: firewall rule refinement

PhoneBoy — Thu, 27 Aug 2020 05:04:08 GMT

This is less relevant in R80.x gateways due to column-based rule matching and improvements in SecureXL.
There are still a few services that don’t generate templates and those rules should be either placed in inline layers and/or be placed near the bottom of the rulebase as appropriate.

Re: firewall rule refinement

sarangoj — Thu, 27 Aug 2020 13:27:43 GMT

Thanks for the information, I'm still working on it

Re: firewall rule refinement

sarangoj — Thu, 27 Aug 2020 13:29:46 GMT

Hi PhoneBoy, I don't understand you, could you go a little deeper into the subject please.

Thanks

Re: firewall rule refinement

G_W_Albrecht — Thu, 27 Aug 2020 13:38:03 GMT

Please read sk98348: Best Practices - Security Gateway Performance - not the complete sk but the topics you are speaking of, as relevant links are collected there...