topic Re: What is the default time that HIT count data is kept in R80? in General Topics

What is the default time that HIT count data is kept in R80?

EVSolovyev — Thu, 14 Feb 2019 16:20:45 GMT

Hi all.

Who knows, how much time hit count data is kept by default?

I think - 3 month. In lab by default I see 3 month. And I can find it in documentation:

http://dl3.checkpoint.com/paid/04/04a17719fee24dfbd327e67de8b79de7/CP_R80.10_SecurityManagement_AdminGuide.pdf?HashKey=1…

But there told about 6 month by default:

http://dl3.checkpoint.com/paid/9d/9d29af5a51f26454dfcec40ad950af6a/CP_R80_SecurityManagement_AdminGuide.pdf?HashKey=1550…

What is true and what is not true? And what we must tell on CCSA\CCSE exam?

Re: What is the default time that HIT count data is kept in R80?

Daniel_Taney — Thu, 14 Feb 2019 16:33:13 GMT

I thought it was 6 months... I'm pretty sure the test material says 6 months. But, I read this debate in a couple of places and would like to see some final confirmation of which is which... or if it changed in between versions.

Re: What is the default time that HIT count data is kept in R80?

EVSolovyev — Thu, 14 Feb 2019 16:41:05 GMT

In R80.10 (I try it in lab) hit count predefined time is 3 month. And I ever thought, that it's 3 month... But documentation confuses me.

Re: What is the default time that HIT count data is kept in R80?

PhoneBoy — Sat, 16 Feb 2019 00:12:23 GMT

You're referencing R80 and R80.10 documentation.

Which specific version are you concerned about?

And if the documentation is wrong, please use the link in the documentation to report it

Re: What is the default time that HIT count data is kept in R80?

Maarten_Sjouw — Sat, 16 Feb 2019 19:13:07 GMT

One of the problems with this, it is a question in the R80 CCSA or CCSE exam.

As we can see above there are several possible answers according the documentation.

Re: What is the default time that HIT count data is kept in R80?

PhoneBoy — Sun, 17 Feb 2019 04:42:52 GMT

Hmm Jason Tugwell‌

Re: What is the default time that HIT count data is kept in R80?

Vladimir — Sun, 17 Feb 2019 14:29:19 GMT

Speaking of Hit Counters, when are we going to get the ability of resetting them on per-rule bases while maintaining the rule UID?

I believe that right now, the only way to reset per-rule counter is to duplicate the rule and delete the original.

Re: What is the default time that HIT count data is kept in R80?

Timothy_Hall — Tue, 26 Feb 2019 16:41:22 GMT

Short Answer: Because the exam is for version R80, the correct answer is 3 months.

Long Answer: When Hit Counts were introduced in R75.40, default value was 6 months. However this default got changed to 3 months somewhere in R77.XX (I know for sure the default in R77.30 is 3 months), so any reasonably new installations will be set to 3 months. However any SMS installations that existed in R75.4X and were upgraded/imported into a later version will still be set to that original default of 6 months, unless someone manually changed it.

--
"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

Re: What is the default time that HIT count data is kept in R80?

EVSolovyev — Wed, 27 Feb 2019 06:44:34 GMT

Hi, Timothy. Thank you for your answer.

So there is a mistake in this document, because it for R80 and I can see the default hit count data caption time - 6 month?

TAGS ARE REQUIRED --> Check Point Software Technologies: Download Center

Re: What is the default time that HIT count data is kept in R80?

Timothy_Hall — Wed, 27 Feb 2019 12:58:59 GMT

Yep that is incorrect and was probably brought forward from older versions of the documentation without being updated.

--
"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com