ACCESS RULE POLICY

[Capt_Mundo]

Hi Team,

I placed my access rule policy for blacklisted IP addresses at the top of the access rule. My group object for blacklisted IP addresses contains numerous IP addresses. Will there be any issues with the runtime for traffic to pass through?

Thank you

[Yashsmk]

Hi Team,

You will not get any issue for this.

IP block rule or advisory(for blocking IP or URL) should be on top of the rule base.

Note: Unused objects and duplicate objects will increase the policy verification time. Avoid creating duplicate objects and delete unnecessary objects. Cleaning up these objects can greatly improve the overall policy installation time.

https://support.checkpoint.com/results/sk/sk102812

 

[G_W_Albrecht · Accepted solution]

See here: https://community.checkpoint.com/t5/Management/Management-has-0-17Million-Blacklist-IPs-in-DB/m-p/12...

[the_rock]

Just follow what @G_W_Albrecht gave you.