topic Re: Can I set up a warning message for policy installation on certain gateways? in General Topics

Can I set up a warning message for policy installation on certain gateways?

Jin_Zhou — Fri, 09 Oct 2020 14:25:54 GMT

Hi,

Is it possible get a pop-up warning message when policy is going to be installed on certain gateways from CMA?

Thanks.

Re: Can I set up a warning message for policy installation on certain gateways?

PhoneBoy — Fri, 09 Oct 2020 17:52:16 GMT

You could conceivably code a SmartTask in R80.40 to achieve this.

Re: Can I set up a warning message for policy installation on certain gateways?

Jin_Zhou — Fri, 09 Oct 2020 20:14:09 GMT

Thanks. So no way in R80.20? What does the popup script in CMA general properties do? See the attached screenshot.

Re: Can I set up a warning message for policy installation on certain gateways?

Jin_Zhou — Fri, 09 Oct 2020 20:33:00 GMT

Or can I just get a popup warning for any installation after clicking on "install" and have to click "ok" or "cancel" to continue?

Re: Can I set up a warning message for policy installation on certain gateways?

PhoneBoy — Mon, 12 Oct 2020 04:01:41 GMT

That is for rules where the Track is set to Alert.

The system WILL alert if you install a different policy package than was previously installed on the gateway, which happens in all current versions.
If you install the same policy package, no warning is issued.

Re: Can I set up a warning message for policy installation on certain gateways?

_Val_ — Mon, 12 Oct 2020 11:41:24 GMT

If you want additional confirmation before policy installation (you already have one, but still), SmartTask is the way. Which menas, R80.30 and above.

Re: Can I set up a warning message for policy installation on certain gateways?

Timothy_Hall — Wed, 14 Oct 2020 14:55:11 GMT

Not sure if this will help, but it is possible to receive an alert after policy is reinstalled to a particular gateway (or all gateways) as shown below in ye olde SmartView Monitor:

Re: Can I set up a warning message for policy installation on certain gateways?

jnoble — Tue, 16 May 2023 19:03:52 GMT

Can we set up an alert for policy installation with information like the policy name, number, time and the username of the checkpoint admin user?

We created an alert following the below sks. But we are getting many alerts whenever there are policy updates on the smartconsole even if it is done by a checkpoint administrator or automatic updates by smartconsole itself.

sk25941, sk38929

Re: Can I set up a warning message for policy installation on certain gateways?

PhoneBoy — Wed, 17 May 2023 01:35:07 GMT

This should be doable with a SmartTask.
You can see some examples in our Toolbox: https://community.checkpoint.com/t5/SmartTasks/Session-description-check/m-p/177546#M6
Documentation is available here: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuide/Content/Topics-SECMG/SmartTasks.htm

(Note SmartTasks were added in R80.30, I believe)