Enabling policy installation approval

[Marcus_Smith]

Hello everyone,

I hope you're all doing well.

I am reaching out to ask for some guidance on enabling policy approval on Check Point policy installations and changes. Specifically, we would like to define a few approvers who can review and approve changes to our policies before they are installed on the Gateways.

Our organization is currently using R81.10 on the Management appliance, and any advice on how to set up this approval process would be appreciated.

Thank you.

[the_rock]

I believe you are probably after Smart workflow, but I cant seem to find anything about it even in R81.20...will keep looking.

Andy

[_Val_]

How about this: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuid...

[the_rock]

Thanks @_Val_ , that helps! 🙌

[_Val_ · Accepted solution]

The feature you are looking for is available with the R81.20 version of the management, and it is a part of SmartWorkflow functionality. 

[Timothy_Hall]

If you have the latest version of the R81.20 SmartConsole, from demo mode you can experiment with the new session approval feature via "The Escapades of John Junior and Jane Senior" whose option is on the bottom of the SmartConsole.  That quoted phase sounds like a quite compelling "film" title don't you think?

[the_rock]

@Timothy_Hall haha, too funny : - )

[Marcus_Smith]

Thanks for all the replies.  

@Timothy_Hall I have just had a play and I think this will do what we want.  Is it as simple as using the R81.20 console with our current R81.10 Management server to make use of this functionality? 

[Tomer_Noy]

The SmartConsole version needs to match the Management server's version. Also, much of the Workflow functionality is implemented in the server code, not just in the client. Therefore, you need to upgrade your Management to R81.20 in order to use this feature.

In addition, you need to configure which admins will require change approval. This is done in their permission profile (under Manage & Settings).