Search:

Of course the module creating a rule based on the source/destination and port has to be vendor API specific. Looking at Checkpoint management API Reference v1.0 I can see 'add access-rule' with...

I believe that policy creation should be vendor agnostic , even at the cost of having 10k rules...put some of my thoughts together here .

These best practices address only initial, manually created part of the policy. In my opinion after this is done, the rest of rules should be created automatically thru API, based on approved...