schedule rule installation

[jmosorio]

hi all.

i´m new to checkpoint, just learning to manage the smartdashboard, it´s pretty easy and useful, but i want to try something i haven´t seen on it, or maybe i´ll have to do it via CLI.

i want to schedule rule installation, so i won´t have to worry about it, just schedule the rule installation at the time my company allows me to do it. is it possible? it will be really good to me cause in my company rule installation is not allowed any moment but 00:00 and is getting quite boring to connect every night just to do that.

i really appreciate your help.

[dantro]

I wouldn't recommend auto-installing a policy at midnight. This way you will never see errors that may appear only during policy installation and you won't notice directly if something has been misconfigured. Imagine your boss calls you at 5 a.m. that the internal users can't work and you gotta get to work right now to fix it. The risk of outages is much bigger than installing it manually and check SmartView Monitor and SmartView Tracker if everything went right.

However, if you really want to schedule policy installation the only way will probably be using the CLI on your SmartCenter Server.

Create a cronjob for this command:
fwm load standard.W fwnode1

Appendix:
fwnode1.. stands for the object name of your enforcement module (fw gateway)
standard.W.. stands for the policy name of your security policy (rulebase)

[jmosorio]

thanx for your help, i´ll be cautious and just gonna give it a try, i know is not completely safe, thanx for the advice.

i have a question, as i said i´m new to checkpoint. how can i know my rulebase name?

thanx again for your important help.

[gladiatorkev]

Hi,

Can this scheduling of a rule on the enforcement modules be done on Win 2k3 Smartcenter servers..?!

If so, Can anyone kindly guide me how..?!

Many Thanks.

Regards