Check all the rules with services "any"

[the_rock]

Hey guys,

Just wondering, is there a way to check how many rules in rulebase would have services listed as "any"?

I checked api documentation, but having a bit of a hard time getting the right syntax.

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/show-services-tcp~v2.0.1%20

Tx as always!

[Bob_Zimmerman]

As in you're trying to find the rules which use the "Any" object in the Service column, or you're trying to find the rules which use a service object with "Match for Any" set?

[the_rock]

Hey Bob,

My bad, should have clarified. Yes, find rules that use "Any" in service column, correct.

[Bob_Zimmerman]

Do you just want a count, rule UUIDs, or the whole rule?

Do you care about keeping the sections in the output?

[the_rock]

Does not matter, all of those are fine Bob, as long as its in readable format 🙂

[Lesley · Accepted solution]

Compliance blade can do this for 100%

Service, destination or ''any'' source

[the_rock]

Probably, but Im trying to see if I can get it from mgmt_cli 🙂

[the_rock]

Maybe Im missing something, but I cant see option anywhere from the blade to do this...

 

[Lesley · Accepted solution]

I can find it in demo mode.

Logs & monitor -> open new tab -> compliance -> under blades click firewall

[the_rock]

Thanks brother, got it now, learned something new 🙂

 

[the_rock · Accepted solution]

My bad guys, should have checked below docs, its in there as well

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topi...

https://support.checkpoint.com/results/sk/sk120256

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topi...