Excluding Specified Settings from Compliance

  • The Baseline Settings Compliance Report will only work up to R77.30 devices.

  • New R77 devices can no longer be added, and revisions and automations are not supported (see End of Support and Deprecated Features).

Overview

Baseline Settings Compliance Reports compare Check Point management servers' (SmartCenter or CMA) settings with the settings on another Check Point management server. This is useful to align server configurations and meet organization standards.

If there are specific settings that do not need to comply with the baseline, you can configure the report to exclude them from the comparison.

For more information, see Baseline Settings Compliance Report.

Exclude a Setting

  1. If the report has not yet been created, create the report.

  2. From this configured report, generate report results.

    The report appears in the browser, with details of non-compliant settings.

  3. In the section of the report for one of the compared devices, under Details, for each setting to be excluded, select the check box in the Exclude attribute column:

    Baseline exclude setting

  4. Click Exclude selected attributes.

    A confirmation message appears:

    Baseline exclusion successful

  5. Run the report again. The excluded settings will be excluded from comparison of all devices in this report.

Cancel an Exclusion

  1. In Report view, select the General Reports tab.
  2. In the line for the relevant report, click edit domain to edit it.
  3. In the Specific Criteria tab, in the relevant Exclusions row, clickedit domain.

    A list of configured exclusions appears:

    ignore list

  4. Select the excluded setting to be removed, and click Remove selected item.
  5. Click Next, and then Save.