topic Re: Spark 1500 - Rule Hit Count in Spark Firewall (SMB)

Spark 1500 - Rule Hit Count

CaseyB — Fri, 18 Aug 2023 19:54:27 GMT

Running on the SMB 1535 platform (R81.10.07 (996001430)) and I noticed rule hit counts do not work.

This is supported in R80.20.X (sk159772) for Centrally Managed devices, but it is not supported in R81.10.X (sk178604). Does anyone know if this feature will be making a comeback? Seems odd that a newer version would remove features.

Re: Spark 1500 - Rule Hit Count

the_rock — Sun, 20 Aug 2023 02:57:32 GMT

Your best bet is probably to check with your local Sales person.

Re: Spark 1500 - Rule Hit Count

PhoneBoy — Mon, 21 Aug 2023 14:29:42 GMT

I imagine this is something that will return in a later release...

Re: Spark 1500 - Rule Hit Count

Zachi_Schnieder — Tue, 22 Aug 2023 14:31:08 GMT

Hi,

We would like to have more info re this issue.

Can you please send a mail to zachis@checkpont.com ?

Thanks,

Zachi Schnieder

Re: Spark 1500 - Rule Hit Count

CaseyB — Wed, 20 Sep 2023 20:46:44 GMT

SK178604 has been updated to support rule hit counts for Centrally Managed devices now.

The issue I am running into is the rule hit count will not work if the device is behind another firewall creating a double NAT situation. This is because the management server will be unable to query the SMB device using CPD_admon service. Just a heads up for anyone running into this in the future.