Will drafting be logged?

[GeorgeF]

Hi Experts,

Our company is using SmartConsole and we have some administrators, the version is 81.20 HF T26.

We have restrict policy that doesn't allow making any changes during business hours to avoid any possible outage. 

My doubt is, if I just did some drafting, like creating or modifying some objects/rules, or discarding the changes, I didn't publish or install,  will it be logged in the audit logs? 

I have read the https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_LoggingAndMonitoring_AdminGu...

But it didn't have more details about the audit logs.

I remember that our last version is R80.40, it will record some 0 changes audit logs, but it looks in current version, it didn't generate any audit logs if I discard the drafts and didn't publish it.

The purpose it to edit during the business hours,(discard if don't really need it), so after hours I can just publish and install, and testing.(that will save much time). 

I think drafting won't make any actual changes, or impact anything,  and it shouldn't be logged/audited, is it?

Thanks 

[the_rock · Accepted solution]

Im pretty positive that is the case, because I tested that in R81 base, R81.10, R81.20 and even in R82 and every time I made changes, discarded them, checked audit logs, there was no record of anything I discarded.

Andy

[Tal_Paz-Fridman · Accepted solution]

Audit Logs are created when the session is published.

BTW consider using SmartWorkflow for creating a session with changes and sending for approval:

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_SecurityManagement_AdminGuide/Cont...

[PhoneBoy · Accepted solution]

The only change a session makes prior to publish is that any rules or objects modified as a result of the session are locked.
Specifically, this means those rules/objects cannot be modified until the session is published or discarded.
As @Tal_Paz-Fridman said, only published sessions show in the Audit logs.