firewall rule refinement

[sarangoj]

Hi!, 

Im new in CheckPoint and i want refinement the base rules but firts i need create a report that bring me use rules statistic for analysis. 

could you recommend me how to generate reports at smartevent ?
And could you recommend a process to fine tune the firewall rule base?

Thank you very much and I look forward to your collaboration!

[G_W_Albrecht]

Look at sk106597: Best Practices - Rulebase Construction and Optimization first

Use sk106410: How to check Top Rule Hits on Security Gateway and HitCount in rulebase

[sarangoj]

Thanks for the information, I'm still working on it

[PhoneBoy]

This is less relevant in R80.x gateways due to column-based rule matching and improvements in SecureXL.
There are still a few services that don’t generate templates and those rules should be either placed in inline layers and/or be placed near the bottom of the rulebase as appropriate.

[sarangoj]

Hi PhoneBoy, I don't understand you, could you go a little deeper into the subject please.

Thanks

[G_W_Albrecht]

Please read sk98348: Best Practices - Security Gateway Performance - not the complete sk but the topics you are speaking of, as relevant links are collected there...