topic Re: Checkpoint policy verify via cpinfo file in General Topics

Checkpoint policy verify via cpinfo file

Atanu_Bandhu — Mon, 09 Jul 2018 16:04:48 GMT

Hi All,

I am trying to verify my CP firewall policy like a duplicate/object, unused, disable policy etc via "info view" tool. I have uploaded the cpinfo file to "info view" tool but I am not able to see any option like disable or unused policy.

CP version: R77.30.

All can you please help me how to verify or any document is available.

Re: Checkpoint policy verify via cpinfo file

PhoneBoy — Mon, 09 Jul 2018 17:17:28 GMT

InfoView is a tool used by Check Point TAC to look at customer configurations for troubleshooting purposes.

It is not meant as a tool to analyze for things like duplicate objects, unused rules, etc.

Aside from performing these tasks manually, you have a couple of options:

Use a third party tool from partners such as Tufin or Algosec
Use SmartOptimize from Check Point Professional Services

Re: Checkpoint policy verify via cpinfo file

Tomer_Sole — Mon, 09 Jul 2018 18:12:31 GMT

also R77.30 Compliance or just natively within SmartDashboard in various screens