topic Re: Search unused rules in General Topics

Search unused rules

valteresjunior — Thu, 24 Jun 2021 20:31:37 GMT

Hi All

How could I search in SmartConsole (or another CP tool) a lists of unused rules, or rules that are not being used a long time? I just find an option in Object Explorer to search unused objects, not rules.

Could you help me?

Best Regards.

Valter Junior

Re: Search unused rules

PhoneBoy — Thu, 24 Jun 2021 22:32:11 GMT

You would do this by hit count.
You’d have to use an API script like: https://community.checkpoint.com/t5/API-CLI-Discussion/Disable-Delete-Rules-with-a-Zero-Hit-Count-MDS-or-SMS/td-p/40005
In the forthcoming R81.10, the rulebase CSV export from SmartConsole will also include hit count information.

Re: Search unused rules

Baasanjargal_Ts — Tue, 29 Jun 2021 07:04:50 GMT

Hi.

You can view how much is that rule used on the Hits column of your access control policy.