Rule base report/Network group report

[Vinodhini]

Hi,

Can anyone suggest how to generate a report for a rule and network groups?

Regards,

Vinodhini R

[Amir_Senn]

If you want a one time thing just write "(<Network_group_name1> OR <Network_group_name2> OR ... <Network_group_namen>) AND rule:<rule_number>

You can also add the groups to a new group (group of groups).

If you want to make it permanent you can go to the view/report and click on options -> view/report filter and add the same syntax under "Custom Filter".

[Vinodhini]

Hello Amir,

Thanks for the response.

Can you give me an example to do this?

[Tal_Paz-Fridman]

There various options to retrive information for rules, rulebase and objects:

1) Using SmartConsole - Security Policies > Access Control > From toolbar - Actions > Export

2) Using Management API - show access-rulebase for the entire rulebase:

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/show-access-rulebase~v1.6%20

3) Using Management API - show access-rule for a single rule:

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/show-access-rule~v1.6%20

[Vinodhini]

Thanks for your response.

But my requirement is to generate the report in excel or PDF format. For a single rule how many users are hitting the rule for the particular destination (Network Group).

[Amir_Senn]

See Attached