Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
GomesLucas
Participant

rule base analysis

R81 SmartReporter : how to do a report "rule base analysis"? is it possible ?

0 Kudos
8 Replies
CE_SE
Employee Alumnus
Employee Alumnus

I believe you're looking to optimize the rule base is that correct? Duplicate services? Objects? Moving rules around? If so SmartEvent/Reporter are not going to provide that information. 

0 Kudos
RobertoQ
Employee
Employee

We have some capabilities to look into Firewall rules and match against checkpoint best practices by using the Compliance Blade.

 

https://www.youtube.com/watch?v=iT2aF3LCi-U

 

0 Kudos
Chris_Atkinson
Employee Employee
Employee

In R77 days and earlier there was a basic "Rule Base Analysis" report in SmartReporter but this is no longer present in R80.x.

Looking at rule hitcounts is an option to start refer also:

sk64143 - Tips to optimize your security management database

Alternatively Check Point PS can assist with a more detailed SmartOptimize service.

https://www.checkpoint.com/downloads/support-services/smartoptimize-sample-report.pdf

https://www.checkpoint.com/downloads/support-services/smartoptimize-datasheet.pdf

CCSM R77/R80/ELITE
0 Kudos
genisis__
Leader Leader
Leader

Chris are there any new templates created for Smartview/Reporter? 
I'm specifically after a template that will generate a report giving me a summary of rules created and deleted per policy.

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Have you checked if the "change report" meets requirements?

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Micr...

CCSM R77/R80/ELITE
0 Kudos
genisis__
Leader Leader
Leader

it not quite what I want Chris, but thanks.

0 Kudos
the_rock
Legend
Legend

Compliance blade is your best friend here. As guys said, smart event wont help much here, sadly.

0 Kudos
genisis__
Leader Leader
Leader

Will check it out, thanks.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events