First Release - Learning Mode To Best Practice Methodology

[Boaz_Barzel]

I am pleased to finally share with you a methodology I have written from my many years of expertise with Check Point Solutions.

Learning mode to Best Practice methodology was created to help you start and better utilize Check Point solutions. At the end of the process, you will be able to apply the Best Practice configuration while tailoring the solution to the organizational needs and maximizing the security effectiveness with minimal overhead to IT and Users experience

Start from sk152772 - Learning Mode to Best Practice Methodology and subscribe to updates!

The first release is for Check Point SandBlast Agent and includes the following SKs:

• sk153713 - SandBlast Agent - Learning Mode To Best Practice
• sk154072 - SandBlast Agent Deployment Best Practice
• sk153714 - SandBlast Agent Learning Mode Configuration
• sk154052 - SandBlast Agent Best Practice Configuration

[segovia]

Hi

I have recently joined the checkmates forum, I wanted to start a new pots but seem unabel to at the moment. 

Please consider this scenario......................... 

There are multiple devices on two networks with a Checkpoint FW in between the two networks. The networks contain Operational Technology devices in a manufacturing environment. Due to organic growth and mis-management there are many ANY-ANY rules on the FW. This needs to be remediated; however, there are legacy systems that current operatives don't have any history of. i.e. we don't know the traffic flows or the ports that need to be enebaled/disabled to effectivly manage the traffic. Is there a Learning Mode on the CP FW that would be able to monitor and report traffic flows over a period of time ?

CP FW model unknown at the moment but can provide if needed.

J