- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- Re: rule base analysis
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
rule base analysis
R81 SmartReporter : how to do a report "rule base analysis"? is it possible ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I believe you're looking to optimize the rule base is that correct? Duplicate services? Objects? Moving rules around? If so SmartEvent/Reporter are not going to provide that information.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
We have some capabilities to look into Firewall rules and match against checkpoint best practices by using the Compliance Blade.
https://www.youtube.com/watch?v=iT2aF3LCi-U
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
In R77 days and earlier there was a basic "Rule Base Analysis" report in SmartReporter but this is no longer present in R80.x.
Looking at rule hitcounts is an option to start refer also:
sk64143 - Tips to optimize your security management database
Alternatively Check Point PS can assist with a more detailed SmartOptimize service.
https://www.checkpoint.com/downloads/support-services/smartoptimize-sample-report.pdf
https://www.checkpoint.com/downloads/support-services/smartoptimize-datasheet.pdf
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Chris are there any new templates created for Smartview/Reporter?
I'm specifically after a template that will generate a report giving me a summary of rules created and deleted per policy.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Have you checked if the "change report" meets requirements?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
it not quite what I want Chris, but thanks.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Compliance blade is your best friend here. As guys said, smart event wont help much here, sadly.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Will check it out, thanks.
