Compare Revisions for Check Point Devices

This topic is intended for TOS Administrators.

Overview

For Check Point management servers, you can compare policies from two different management servers. For example, if you migrate a policy from one management to another, you can check to make sure that the policies match.

Compare Two Different Check Point Devices

1. Log into SecureTrack as an Administrator.

2. In the address bar of your browser, add /tools to the SecureTrack base URL.

   For example: https://192.168.1.1/tools

3. Click Policy Compare.

   The tool appears:

   

4. Enter the Device ID of a monitored device.

   To get the ID of a device, in SecureTrack:

   1. Navigate to Monitoring > Manage Devices.

   2. Click a device in the device tree.

   3. Type the letter "t".

      The ID for every device appears.

   

5. Enter the numbers of the revisions to compare.

   The revision numbers are shown in the revision table in Compare.

6. You can enter the policy package name.

   The policy package name are shown in the revision table in Compare.

7. To analyze only Check Point rules configured for specific targets, type SecureTrack's ID number for an Install On Group. For assistance in obtaining this number from SecureTrack's database, please contact Tufin support.
8. To see the results in XML format, select XML. For an HTML report, do not select XML.
9. Click Get Report.