An issue affecting customers using the Security Intelligence Platform (SIP) with Check Point R80 when upgrading to release 9.7.1 has been discovered.
After upgrading to release 9.7.1, Security Rule normalization for Check Point R80 firewalls no longer takes the “Install-On” value into consideration, and the only rules normalized are those which have the “Policy-Targets” defined.
This issue will reduce the rules associated to firewalls, resulting in loss of data previously associated to these rules in the SIP system, including historical usage data, rule level change details as well as any rule documentation.
FireMon has identified and developed a device pack for this. For customers using Check Point R80 and have already upgraded, contact FireMon Support to receive the updated device pack and procedure needed to resolve the issue.