Log parsing and FW rule creation upon that?

[Baya_007]

Hi all,

Does anybody know is there some kind of tool (script or something) that would do log parsing (check point logs) and create (suggest) FW rules based on that parsing?

Kind regards,

Petar

[_Val_]

AFAIK, there is no such tool.

Anyway, building policies based on logged traffic is a VERY bad idea. You will end up with tons of host to host rules without any logic and order. On top, there will be huge amount of traffic you do not really want to accept in these logs.

[Chris_Atkinson]

Alternately if the objective is to migrate from another vendors solution or to introduce security to a environment that presently has none there are other options potentially available to you.

We have SmartMove for the first scenario and solutions such as NDR for the later.