@nmpramalho I think I understand your point.
as the filter applied in once bulk, soon as one of the condition matches, the action is performed. so the svcTEST applies on svc* therefore dropped.
If this is indeed the case, it seems that it is a legit RFE to send with your local SE team.
As for Infinity Identity, it is a new application in Infinity Portal, which communicates with Identity Collector and also with Entra ID, Intune, Defender and Harmony clients.
Check this thread for more details:
https://community.checkpoint.com/t5/General-Topics/Simplifying-Zero-Trust-with-Infinity-Identity-Cen...
The filters page I showed is part of this application. In case you will create the following filters it will work with Infinity Identity:
1. identity "svcTEST" include
2. Identity regex "svc*" exclude
If needed, contact me for more details privately here or at royip@checkpoint.com
Thanks,
Royi Priov
R&D Group manager, Infinity Identity