- Products
- Learn
- Local User Groups
- Partners
- More
Quantum Spark Management Unleashed!
Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
HTTPS Inspection
Help us to understand your needs better
CheckMates Go:
SharePoint CVEs and More!
Hello all,
My name is Ido and I’m a software developer in Checkpoint R&D under the Management Products team.
I’m happy to announce that starting from today a new feature of Automatic Revisions Purge is available and can be used via API.
See full documentation and examples here: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-automatic-purge~v1.7%20
I would like to emphasize that it is very important to use purge in order to clear unused data and by that maintain an optimized disk space and improve the general performance of the Management product.
We recommend you to configure automatic revisions purge to run once in a month and purge all the revisions which were not created at the last 10 days.
P.S in order to actually reduce the disk space one should open an SR to TAC for running the procedure.
Automatic purge is available in the below jumbo versions:
R80.20(#18), R80.30(#10), R80.40(#6)
And will be available in R81 soon.
If you have questions or feedbacks feel free to contact me privately.
Thanks,
Ido
only via API? Is it not configurable via SmartConsole?
Yes, for now it will be available only via API.
I see you can configure it with the SmartConsole command line and also from the GAIA cli - mgmt.
But I guess that it would be nice if it was in the Smartconsole too
not sure why I am getting this error
mgmt set automatic-purge enabled true keep-sessions-by-days true number-of-days-to-keep 30 scheduling.start-date "2020-10-29T12:00:00"
MGMT9000 code: "generic_err_missing_required_parameters"
message: "Missing parameter: [automatic purge is enabled but missing one of: time-units/check-interval/start-date]"
Hi,
Try and put quotes on "30"
You are missing interval and time-units.
Your command is to: keep revisions published in last 30 days, starting from 2020-10-29T12:00:00, but you need to config also the intervals of when the purge execution itself will be triggered. say you want the purge will be triggered every 3 weeks, your full command should look like this:
mgmt_cli set automatic-purge enabled true keep-sessions-by-count false number-of-days-to-keep "30" scheduling.check-interval "21" scheduling.time-units "days" scheduling.start-date "2020-10-29T12:00:00" --format json
Full examples and more can be found here:
https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-automatic-purge~v1.7%20
oh, cool. Thanks
I would really appreciate to find a GUI for this in console - this feature is far too important to be reserved for API nerds and CLI freaks exclusively 😉
Agree, absolutely
Another good feature i'd like to see in Smartconsole is being able to select more than one revision to purge at a time. Eg control-click or shift-click. purging line by line is painful.
Hi,
not working for me with this command on a MDS R81.10 JHFA Take 45
[Expert@servername:0]# mdsenv MyDomain
[Expert@servername:0]# mgmt_cli -r true set automatic-purge enabled true keep-sessions-by-count false number-of-days-to-keep "5" scheduling.check-interval "1" scheduling.time-units "days" scheduling.start-date "2022-04-29T06:00:00"
code: "err_validation_failed"
message: "Operation is not allowed - can't create automatic purge from global or system domains!"
Executed command failed. Changes are discarded.
[Expert@servername:0]#
API Documentation does not tell how to handle this for "Global" Domain and other Domains.
I know that this feature was buggy in R80.40 - I had a ticket for that which confirmed these bugs - but not sure why this does not work on R81.10.
You'll probably need to use the domain parameter, as mgmt_cli does not read the mdsenv.
`mgmt_cli -r true domain "MyDomain" ...`
Thanky for reply. I already opened a ticket at my Diamond Engineer because it is not working. Looks like a bug or another error in our environment. Unfortunately since one week no progress.
Nevertheless. Thank you for your reply.
Hello,
we got feedback some months ago:
Automatic Purge on the Global domain is not possible "out of the box".
Global Revisions may contain information from local domains and if you purge the global it may also delete things needed for still existing local revisions.
So there is not internal check if the deleted global revision may affect local revisions or not so R&D deleted the global automatic purge on the API to save the customer from doing wrong things.
However - they allow it on global domain via SmartConsole and the same issues may occure that you delete things on the global which may affetc the local domain's revisions.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
User | Count |
---|---|
12 | |
9 | |
4 | |
3 | |
2 | |
2 | |
2 | |
1 | |
1 | |
1 |
Tue 16 Sep 2025 @ 02:00 PM (EDT)
Securing Applications with Check Point and AWS: A Unified WAF-as-a-Service Approach - AmericasWed 17 Sep 2025 @ 04:00 PM (AEST)
Securing Applications with Check Point and AWS: A Unified WAF-as-a-Service Approach - APACWed 17 Sep 2025 @ 03:00 PM (CEST)
Securing Applications with Check Point and AWS: A Unified WAF-as-a-Service Approach - EMEAThu 18 Sep 2025 @ 03:00 PM (CEST)
Bridge the Unmanaged Device Gap with Enterprise Browser - EMEAThu 18 Sep 2025 @ 02:00 PM (EDT)
Bridge the Unmanaged Device Gap with Enterprise Browser - AmericasTue 16 Sep 2025 @ 02:00 PM (EDT)
Securing Applications with Check Point and AWS: A Unified WAF-as-a-Service Approach - AmericasWed 17 Sep 2025 @ 04:00 PM (AEST)
Securing Applications with Check Point and AWS: A Unified WAF-as-a-Service Approach - APACWed 17 Sep 2025 @ 03:00 PM (CEST)
Securing Applications with Check Point and AWS: A Unified WAF-as-a-Service Approach - EMEAThu 18 Sep 2025 @ 03:00 PM (CEST)
Bridge the Unmanaged Device Gap with Enterprise Browser - EMEAThu 18 Sep 2025 @ 02:00 PM (EDT)
Bridge the Unmanaged Device Gap with Enterprise Browser - AmericasAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY