Can I set up a warning message for policy installation on certain gateways?

[Jin_Zhou]

Hi,

Is it possible get a pop-up warning message when policy is going to be installed on certain gateways from CMA?

Thanks.

[PhoneBoy · Accepted solution]

You could conceivably code a SmartTask in R80.40 to achieve this. 

[Jin_Zhou]

Thanks. So no way in R80.20? What does the popup script in CMA general properties do? See the attached screenshot.

[Jin_Zhou]

Or can I just get a popup warning for any installation after clicking on "install" and have to click "ok" or "cancel" to continue?

[_Val_]

If you want additional confirmation before policy installation (you already have one, but still), SmartTask is the way. Which menas, R80.30 and above.

[PhoneBoy]

That is for rules where the Track is set to Alert.

The system WILL alert if you install a different policy package than was previously installed on the gateway, which happens in all current versions.
If you install the same policy package, no warning is issued.

[jnoble]

Can we set up an alert for policy installation with information like the policy name, number, time and the username of the checkpoint admin user?

We created an alert following the below sks. But we are getting many alerts whenever there are policy updates on the smartconsole even if it is done by a checkpoint administrator or automatic updates by smartconsole itself.

sk25941, sk38929

[PhoneBoy]

This should be doable with a SmartTask.
You can see some examples in our Toolbox: https://community.checkpoint.com/t5/SmartTasks/Session-description-check/m-p/177546#M6 
Documentation is available here: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuid... 

(Note SmartTasks were added in R80.30, I believe)

[Timothy_Hall]

Not sure if this will help, but it is possible to receive an alert after policy is reinstalled to a particular gateway (or all gateways) as shown below in ye olde SmartView Monitor: