SmartConsole Extension - Easy deletion of unused rules

[HeikoAnkenbrand]

Since deleting unused rules always annoyed me, I created a SmarteConsole plugin.
It does the following:

- Shows all rules in SmartConsole that have not been used (hit counter = 0).
- Lets you select any of the unused rules you want to delete.
- Generates the CLI commands for the Management Server to delete those rules.
   You only need to copy and paste the output into an SSH session on the SMS.
   

I deliberately did not automate the deletion directly in SmartConsole, to avoid accidental rule removal if the tool is misused.

Install Smart Console Extension:
https://www.checkpoint.tips/ex/delete.json

PS:

I quickly created the SmartConsole extension during the last two days of my vacation.
When I have a bit more time, I’ll build a nicer version and make it available in the tools section.

Versions:

1.0                   Basic version                                                                                       08/20/2025
1.1                   Public community version                                                                 08/27/2025
1.2                   Add layers and autoload                                                                    09/01/2025                                   

Demo video

Install SmartConsole Extension

To install SmartConsole Extensions, you can watch this video:

[HeikoAnkenbrand]

It does the following:

Version 1.1:

• Shows all rules in SmartConsole that have not been used (hit counter = 0).
• Lets you select any of the unused rules you want to delete.
• Generates the CLI commands for the Management Server to delete those rules.

Version 1.2:

• In the new version 1.2, I have added the layer, so it should now work with any layer.
  Furthermore, the list of objects to be deleted is now automatically loaded when the page is opened.

[lrezende]

Having some problems here:

[Francis_Noel]

Hello
My SmartConsol crash evry time when I clic on policy action buton
If i remove this extenssion is workin ?

Thanks

[HeikoAnkenbrand]

Hello @Francis_Noel 

It seems that in newer SmartConsoles there is a fundamental issue with Smart Console Extensions. Please follow the post below, where this error is being addressed:

SmartConsole Extension Issue in R81.20/R82

[Matlu]

Hello, @HeikoAnkenbrand 

Does this work in MDS environments?

I have several CMAs in my MDS [approx. 8].

Is this tool useful?

Does the process for using it differ greatly from that of an SMS?

Thank you.

[the_rock]

I tested it in the MDS lab bro and worked fine.

[Matlu]

Bro.

Where do you apply this extension?

In the MDS box itself?

Or is it done by CMA?

Can you share an image of your lab or a short video, please?

Thanks 🙂

[the_rock]

Sorry bro, had to delete it to create Palo Alto lab, but it was on CMA.

[Matlu]

🥹🥲

This tool shows you the 0 Hits rules, but for how long?

The last 3 months, 6 months, etc.?

Or does it show you the general “regardless” of how long the rule has not been used?

[the_rock]

Hey bud,

Depends on below setting.

 

[Matlu]

Do you know if the tool ‘installs policies’ once you run the commands in SMS/MDS(CMA)?

Or is the installation of policies done manually after applying the commands in the CLI?

[the_rock]

Hey bro,

Does NOT auto delete any rules, as Heiko wrote:

****************

Since deleting unused rules always annoyed me, I created a SmarteConsole plugin.
It does the following:

- Shows all rules in SmartConsole that have not been used (hit counter = 0).
- Lets you select any of the unused rules you want to delete.
- Generates the CLI commands for the Management Server to delete those rules.
   You only need to copy and paste the output into an SSH session on the SMS.
   

I deliberately did not automate the deletion directly in SmartConsole, to avoid accidental rule removal if the tool is misused.

***********************

[PhoneBoy]

It might make more sense for the CLI commands to be ones you can copy/paste to the Command Line available in SmartConsole.
Or maybe it can be an option, just a thought.

[majkel]

Would be nice to maybe add column "last change date" in show rules section ?

[Maja_B]

That's a good suggestion. I would add the "creation date", as well, as most of the times we don't want to remove the rules that are created or modified recently (probably in order to facilitate for some traffic that is expected in the future).

[the_rock]

Gave this to few clients, they all LOVED it, really useful.

Andy

[satish_Puri]

Hi HeikoAnkenbrand, 

Sorry to bother you, But would be better if you can pass the instructions "How to inject this plugin" in Smart Console.

[_Val_]

@satish_Puri see the interactive guide here: https://support.checkpoint.com/results/sk/sk171436#Extension

Or see here: https://community.checkpoint.com/t5/Management/How-to-extend-and-enhance-SmartConsole/td-p/41429

[Ingard]

[the_rock]

Just follow what @_Val_ and @Ingard provided.

Andy

[the_rock]

Keep these extensions coming, Heiko...BRILLIANT!

Andy

[HeikoAnkenbrand]

Install SmartConsole Extension

To install SmartConsole Extensions, you can watch this video:

[HeikoAnkenbrand]

Demo video