Compare Checkpoint Policies

[kanishkaw]

Hi 

We had 2 Checkpoint Firewalls, Say "A Firewall/ Policy A" and "B Firewall/ Policy B", having 600 rules and 700 rules, and we merged them together to feed into a 3rd Firewall, Say "C Firewall/ Policy B", to decommission previous 2 Checkpoint Firewalls.

All 3 firewalls were managed via 3 different management centers in the past. So we had no easy way of merging all Policies together.

The new firewall (Say Firewall C), we have a policy of slightly less than Firewall A policy and Firewall B policy (1250 rules which is less than 600+700 = 1300 ) due to duplicate rules removal.

How can I make sure all unique rules in Policy A and Policy B are in Policy C.

Is there a easy way?

Thanks

Kanishka

[John_Fleming]

Does easy include cutting a PO? If so, yes there is a very easy way! 😄

[PhoneBoy]

Certainly no cost-free way to do it short of monitoring the logs for drops. 
You’d be using either a third party tool or Professional Services (either from Check Point or a partner).