Request for enhancements for filtering in SmartConsole

[Chris4Checkmate]

Hi,

the number of rules increases over time and so it becomes more time consuming to troubleshoot the rulebase (at least when multiple administrators are doing changes).

Question:

Is there any possibility in SmartConsole to find/filter all rules which have changed within the last few hours or days (without the need of any additional software)? (it would be great if we could also see deleted rules) (history shows only the changes of the selected rule)

Is there any possibility in SmartConsole to find rules which have been disabled (our step before deletion) but still have a hit count greater than zero within the last 7 days? (we had multiple issues when using Tufin for automatic rule cleanup)

In my knowledge at the moment the rule filtering option does not support fields like hitcount/state-disabled/comment or any change time.

Regards,

Chris

[the_rock · Accepted solution]

I believe you are correct. For those things, you may need Smart Event.

[the_rock]

Also, you can always submit an RFE for these things. Happy holidays!

https://support.checkpoint.com/results/sk/sk71840

[Tal_Paz-Fridman · Accepted solution]

As @the_rock wrote you can use SmartEvent predefined Audit Overview 

It also allows to drill down by clicking on any value

You can also use the Changes report between Revisions:

Manage & Settings > Sessions > Revisions > Actions > Changes 

[the_rock]

Yes sir! Example from my lab. Happy holidays to you and your family!