fw sam_policy

Notes:

• These commands are interchangeable:

  • For IPv4: "fw sam_policy" and "fw samp".

  • For IPv6: "fw6 sam_policy" and "fw6 samp".

• You can run these commands in Gaia Clish The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)., or Expert mode.

• Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. stores the SAM Policy rules in the $FWDIR/database/sam_policy.db file.

• Security Gateway stores the SAM Policy management settings in the $FWDIR/database/sam_policy.mng file.

Important:

• Configuration you make with these commands, survives reboot.

• VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. mode does not support Suspicious Activity Policy configured in SmartView Monitor. See sk79700.

• In VSX mode, you must go to the context of an applicable Virtual System.

  • In Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Clish, run: set virtual-system <VSID>

  • In the Expert mode, run: vsenv <VSID>

• In a Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing., you must configure all the Cluster Members in the same way.

Best Practice - The SAM Policy rules consume some CPU resources on Security Gateway. Set an expiration for rules that gives you time to investigate, but does not affect performance. Keep only the required SAM Policy rules. If you confirm that an activity is risky, edit the Security Policy Collection of rules that control network traffic and enforce organization guidelines for data protection and access to resources with packet inspection., educate users, or otherwise handle the risk.