Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
EVSolovyev
Contributor

What is the default time that HIT count data is kept in R80?

Hi all.

Who knows, how much time hit count data is kept by default?

I think - 3 month. In lab by default I see 3 month. And I can find it in documentation:

http://dl3.checkpoint.com/paid/04/04a17719fee24dfbd327e67de8b79de7/CP_R80.10_SecurityManagement_Admi... 

But there told about 6 month by default:

http://dl3.checkpoint.com/paid/9d/9d29af5a51f26454dfcec40ad950af6a/CP_R80_SecurityManagement_AdminGu... 

What is true and what is not true? And what we must tell on CCSA\CCSE exam?

9 Replies
Daniel_Taney
Advisor

I thought it was 6 months... I'm pretty sure the test material says 6 months. But, I read this debate in a couple of places and would like to see some final confirmation of which is which... or if it changed in between versions.

R80 CCSA / CCSE
0 Kudos
Reply
EVSolovyev
Contributor

In R80.10 (I try it in lab) hit count predefined time is 3 month. And I ever thought, that it's 3 month... But documentation confuses me.

0 Kudos
Reply
PhoneBoy
Admin
Admin

You're referencing R80 and R80.10 documentation.

Which specific version are you concerned about?

And if the documentation is wrong, please use the link in the documentation to report it Smiley Happy

0 Kudos
Reply
Maarten_Sjouw
Champion
Champion

One of the problems with this, it is a question in the R80 CCSA or CCSE exam.

As we can see above there are several possible answers according the documentation.

Regards, Maarten
PhoneBoy
Admin
Admin

Hmm Jason Tugwell

0 Kudos
Reply
Vladimir
Champion
Champion

Speaking of Hit Counters, when are we going to get the ability of resetting them on per-rule bases while maintaining the rule UID?

I believe that right now, the only way to reset per-rule counter is to duplicate the rule and delete the original.

Timothy_Hall
Champion
Champion

Short Answer: Because the exam is for version R80, the correct answer is 3 months.

Long Answer: When Hit Counts were introduced in R75.40, default value was 6 months. However this default got changed to 3 months somewhere in R77.XX (I know for sure the default in R77.30 is 3 months), so any reasonably new installations will be set to 3 months. However any SMS installations that existed in R75.4X and were upgraded/imported into a later version will still be set to that original default of 6 months, unless someone manually changed it.

--
"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

"Max Capture: Know Your Packets" Video Series
now available at http://www.maxpowerfirewalls.com
EVSolovyev
Contributor

Hi, Timothy. Thank you for your answer.

So there is a mistake in this document, because it for R80 and I can see the default hit count data caption time - 6 month?

TAGS ARE REQUIRED --> Check Point Software Technologies: Download Center 

0 Kudos
Reply
Timothy_Hall
Champion
Champion

Yep that is incorrect and was probably brought forward from older versions of the documentation without being updated.

--
"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

"Max Capture: Know Your Packets" Video Series
now available at http://www.maxpowerfirewalls.com
0 Kudos
Reply