Ignoring Check Point Revisions from Specific Admins

Overview

For Check Point devices, you can configure TOS to ignore revisions from specific administrators that are not relevant to firewall changes.

Add a list of admins to ignore

  1. In the browser address bar, after the IP address, add: /stcgitest.htm e.g. https://11.22.33.44/stcgitest.htm.
  2. Click Edit StConf.
  3. Click Fetch StConf.
  4. Add this field to stconf:

    < Lea_Ignored_Admin_Names>
    <Admin_Name>ignored1</Admin_Name>
    <Admin_Name>ignored2</Admin_Name>
    </ Lea_Ignored_Admin_Names>
    Where each Admin_Name field is an admin name to ignore.

  5. Click Submit New Conf.
  6. From the CLI of the SecureTrack server, run:

    # kubectl exec -it deployment/device-collector -c device-collector -- bash
    # st restart <check_point_mgmt_id>