Policy Installation

[ihenock101]

Hi

I have a question regarding CheckPoint way of Policy pushing from SMS to gateways

here is the scenario

I have two firewalls Gateways which are managed by one sms and both have their own Policy Packages. I create an object Group and I use this object group on both firewalls. on the other day I modify this group does Installing SMS database is enough or should I push Policy on both gateways?

[Chris_Atkinson]

You must install the policy for it to take effect on the Gateway.

There are other object types that can update dynamically but a standard group is not one of those.

[the_rock]

@Chris_Atkinson is correct. The ONLY times you do not have to push policy is if you modify say administrator or a local user, just install database in that case, since it does not really affect the firewalls. Other than that, policy push is pretty much always required.

[_Val_]

Moved to a more appropriate space