How to create firewall rules analysis from cpinfo

[Abeja_huhuhu]

Hi Guys,

i would like to know,  is it possible for us to get firewall rules hits just from cpinfo? the main objective is to get which rules  should be prioritize. I believe this is easily being done on R80 above. However, we still have customers running on R77 and currently they are not able to upgrade their firewall at the moment. so we need to check and optimize their firewall rules. Please advise.

thanks.

[Arik_Ovtracht]

Hi,

R77 versions are not officially supported by Check Point, so we cannot add any features to those versions.

[Abeja_huhuhu]

hi @Arik_Ovtracht thanks for the updates.

[Lesley]

No CPinfo will contain data like:

• System message logs
• Module version information
• Installed hotfixes information
• OS and network statistics
• Interfaces and devices information
• Various FW1 tables
• Configuration and database files
• Core dump files

If you would like to export the rulebase you could try this legacy tool, the Web Visualization Tool:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

I doubt it contains the hit counter, but you can see the screenshot of the tool in the SK if it meets the requirement. 

To be honest, I would prefer direct access to the system and clean-up rules from there. 

[Abeja_huhuhu]

Hi @Lesley Noted. i will try to see if this can help me. thanks.

[G_W_Albrecht]

Tried sk135212: How to export the rulebase Hit Count ? Other possible way is https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... showing the SQL hit count database.