Policy Installed Automatically in smart console by system_admin

[surya]

Hello Team,

In my smart console threat prevention policy is installed automatically every day night 08:00 PM. The policy is installed by system-admin.

But in Administrators profile there is no system-admin account is there. Also there is no scheduled policy is configured in my console.

is it there checkpoint automatic threat prevention policy installation is there?

[Tal_Paz-Fridman · Accepted solution]

This is probably part of the IPS Scheduled Update settings:

SmartConsole > Security Policies > Threat Prevention > Custom Policy Tools > Updates > IPS > Schedule Update

There is a setting for On Successful IPS update on the Security Management Server, install policy on the Security Gateway

[Amir_Senn]

I want to give you a good thumb rule - check if the audit logs show something useful. Maybe it has more information or maybe you can see another operation beforehand and policy installation follows.