cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted

Will (Smart)Workflow come back?

Jump to solution

Hello together,

i am wondering if there are any news, if and when (Smart)Workflow will come back.

Does anybody have news about that?

Best regards

Vincent

and now to something completely different
1 Solution

Accepted Solutions

Re: Will (Smart)Workflow come back?

Jump to solution

Hi, 

The plan is to incorporate the feature set of SmartWorkflow without calling it "an extra blade". 

The R80.10 security management platform it built for team work and change management. The session name and description appear in the audit logs (and you can mark them as mandatory for users to fill in). When installing a policy, you get the list of changes that will be installed. As you make changes, the Session pane on the right-side shows you which changes were made. And with SmartView you can make audit overview reports and charts for change management. Every publish operation creates a revision automatically, allowing you to log-in to that old revision with read-only permissions, or install that previous revision on your gateway if something goes wrong.

The new Permission Profiles let you segregate the install policy permission from the rest of the permissions, and create a new working model in which the person that makes the management changes is not allowed to deploy them. Session Take-Over lets you approve, discard or change pending changes on behalf of your teammates (if you have the permission for it). 

All of the following can help you make effective change management and approval cycle. Even though R80.10 does not yet have an "approve changes" button, you might be able to utilize these features above for this purpose. 

The next step with change approval is to automate approval or denial of certain changes, if they don't meet your criterias. Management API commands such as show-changes and show-sessions can help you automate the approval cycle. With SmartEvent you can create an Automatic Reaction whenever someone publishes changes or installs a policy and send it over email or run a custom script. Compliance Blade shows you a dashboard of misconfigurations and security alerts in case your administrators do not follow some of the best practices.  And we are interested to know what automated checks you guys have - so that we can extend the platform to allow you to run those checks automatically in our next releases.

20 Replies

Re: Will (Smart)Workflow come back?

Jump to solution

Hi, 

The plan is to incorporate the feature set of SmartWorkflow without calling it "an extra blade". 

The R80.10 security management platform it built for team work and change management. The session name and description appear in the audit logs (and you can mark them as mandatory for users to fill in). When installing a policy, you get the list of changes that will be installed. As you make changes, the Session pane on the right-side shows you which changes were made. And with SmartView you can make audit overview reports and charts for change management. Every publish operation creates a revision automatically, allowing you to log-in to that old revision with read-only permissions, or install that previous revision on your gateway if something goes wrong.

The new Permission Profiles let you segregate the install policy permission from the rest of the permissions, and create a new working model in which the person that makes the management changes is not allowed to deploy them. Session Take-Over lets you approve, discard or change pending changes on behalf of your teammates (if you have the permission for it). 

All of the following can help you make effective change management and approval cycle. Even though R80.10 does not yet have an "approve changes" button, you might be able to utilize these features above for this purpose. 

The next step with change approval is to automate approval or denial of certain changes, if they don't meet your criterias. Management API commands such as show-changes and show-sessions can help you automate the approval cycle. With SmartEvent you can create an Automatic Reaction whenever someone publishes changes or installs a policy and send it over email or run a custom script. Compliance Blade shows you a dashboard of misconfigurations and security alerts in case your administrators do not follow some of the best practices.  And we are interested to know what automated checks you guys have - so that we can extend the platform to allow you to run those checks automatically in our next releases.

Re: Will (Smart)Workflow come back?

Jump to solution

Hi Tomer,

thank you for info and suggestions

Cheers

Vincent

and now to something completely different
0 Kudos
Danny
Pearl

Re: Will (Smart)Workflow come back?

Jump to solution

This is so important it should be announced more publicly.

0 Kudos
S_E_
Nickel

Re: Will (Smart)Workflow come back?

Jump to solution

 Hi

...When installing a policy, you get the list of changes that will be installed. As you make changes, the Session pane on the right-side shows you which changes were made....

You get the list but it is definitely not helpful like the graphical output of the SmartWorkFlow. It is simply not 'readable/visible if it is more than 1 object change.

And with SmartView you can make audit overview reports and charts for change management. Every publish operation creates a revision automatically, allowing you to log-in to that old revision with read-only permissions, or install that previous revision on your gateway if something goes wrong.

After someone published it. If there is a misconfiguration done by other admin, it is already to late. 

  

All of the following can help you make effective change management and approval cycle. Even though R80.10 does not yet have an "approve changes" button, you might be able to utilize these features above for this purpose. 

Yes, but is is still a step back if you are using SmartWorkflow for approval/4-eye principal changes.

The next step with change approval is to automate approval or denial of certain changes, if they don't meet your criterias. Management API commands such as show-changes and show-sessions can help you automate the approval cycle.

Are the plans to migrate it back to SmartConsole? 

Or do you recommend only API and third party tools?

Regards

5 of 5 people found this helpful

0 Kudos

Re: Will (Smart)Workflow come back?

Jump to solution

Hi,

SmartWorkflow reports worked post-save. Audit overviews work post-publish. We are aware that both of those would be more useful doing pre-publish and we plan to do that in our next releases.

As well as a simple approval cycle.

Re: Will (Smart)Workflow come back?

Jump to solution

As far as I know, you get the Smartflow reports before the changes have been pushed to the gateway.

0 Kudos

SmartWorkflow : where can I find the sessions stored? I think this sessions is not deleted and filli

Jump to solution

I think these sessions is not deleted and they are filling my hard drive

0 Kudos
Employee+
Employee+

Re: Will (Smart)Workflow come back?

Jump to solution

if we enable session pane from admin does that enabled for all the users or it is per user setting. if it is per user setting then user can disable it anytime. Can we control the publishing right for user same a policy install rights?

0 Kudos
Employee
Employee

Re: Will (Smart)Workflow come back?

Jump to solution

If you are referring to the new solution, then no - the enforcement will be central. Meaning that once the feature is installed / enabled, no user will be able to publish his session without going through the change management flow.

0 Kudos
Employee+
Employee+

Re: Will (Smart)Workflow come back?

Jump to solution
Can you explain in detail.
0 Kudos

Re: Will (Smart)Workflow come back?

Jump to solution

So is it coming back with r8x or not? Just a simple yes or no is much obliged thanks.

Re: Will (Smart)Workflow come back?

Jump to solution

It is 80% there.

15% will make its way to our next releases.

The remaining 5% are the fact that it has a distinguished name, the extra cost, and enabling it on the object editor and those will not come back.

If your upgrade to R80.10 fails due to "your SmartWorkflow blade is enabled", please read my response above about Change Management features for R80.10 and make a decision whether simply turning off this "extra blade" and using the Change Management features that exist in R80.10 are sufficient.

Re: Will (Smart)Workflow come back?

Jump to solution

Can you set expectations on when the remaining features  will be available in R80.20?

0 Kudos
S_E_
Nickel

Re: Will (Smart)Workflow come back?

Jump to solution

@Luis_Miguel_Mig wrote:

Can you set expectations on when the remaining features  will be available in R80.20?


Hm,

even in R80.30 EA there is no SmartWorkflow mentioned.

No graphical report, no 4-eye approval stuff.

So, still stuck in R77.30 until this feature is available.

Regards

 

0 Kudos
Employee
Employee

Re: Will (Smart)Workflow come back?

Jump to solution

Agree with Nickel, can we simply to ask a question do we going to support SmartWorkflow features to R80.x? The R77.30 going to EOL......

0 Kudos
Employee+
Employee+

Re: Will (Smart)Workflow come back?

Jump to solution

Changes Report (which was presented at the CPX 2019) will be released this year and will be supported in the upcoming R80.30 SmartConsole.

diff.png

Employee
Employee

Re: Will (Smart)Workflow come back?

Jump to solution

Thanks.

0 Kudos
GlennF
Ivory

Re: Will (Smart)Workflow come back?

Jump to solution

The Change Summary report is going to be built in to R80.30 SmartEvent, or is there something that needs to be added?

0 Kudos
Employee+
Employee+

Re: Will (Smart)Workflow come back?

Jump to solution

It will be added as an Extension into SmartConsole (and not related to SmartEvent)

 

0 Kudos
Employee+
Employee+

Re: Will (Smart)Workflow come back?

Jump to solution

I will try to add some more info and explanations about what we are doing with Workflow.

In R77.x, Workflow was an additional blade that was purchased on top of the Management license. It had various features, but from our talks with customers the following two were most prominent:

  1. Changes diff report to see what changes were done before pushing to the gateway, or saving to the DB. The vast majority of users purchased Workflow for this feature.
  2. Approval cycle, most commonly a simple 4-eye-principal, where another person is needed to approve the changes. For some of the Workflow customers, this was also an important feature.

To a certain extent, the above can be achieved with existing R80.x features such as the sessions management and the change summary before pushing a policy. However, the usability and clarity when doing so, is not at the level that we want to reach.

Workflow has additional features (that some use), but we made a decision to focus on the two main features instead of implementing a replica of the R77.x design into R80.x. Also, we decided that these two features will be included in the product and will not require another license that needs to be purchased.

The Change Diff report was implemented using our new SmartConsole Extensions technology. The cool thing about that is that we can provide the feature over R80.30, even though the development continued after R80.30 was closed for new content. This was used by multiple customers as part of our EA process and we can provide it to additional customers on demand. We still have a few kinks and bugs that we want to squash before we declare it public for everyone.

The 4-eye approval is developed using new I/S (SmartTasks) that we've added in R80.40. It's possible that it will be a "soft launch" in R80.40 and a quick RFE request will be needed to get it. We want to get some feedback on usage and perhaps do some more development on that before we open it up more publicly.

Feel free to reach out to me or @Amir_Jaron about this.