Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

XSUP-46574-Checkpoint-Firewall #38597

Merged
merged 3 commits into from
Feb 11, 2025
Merged

XSUP-46574-Checkpoint-Firewall #38597

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
919478f
changed schema and modelingrule
sdaniel6 Feb 11, 2025
137e2bd
added release notes
sdaniel6 Feb 11, 2025
881ec51
Merge branch 'master' into XSUP-46574-Checkpoint-Firewall
sdaniel6 Feb 11, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions Packs/CheckpointFirewall/ModelingRules/CheckpointFirewall_1_3/CheckpointFirewall_1_3.xif
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -87,6 +87,7 @@ alter Threat_Prevention_Rule_Name = if(cs1Label = "Threat Prevention Rule Name",
| alter ipv6src = if(src != null and ipv4src = null, src, null)
| alter ipv4dest = if(dst ~= "\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}", dst, null)
| alter ipv6dest = if(dst != null and ipv4dest = null, dst, null)
| alter proto = to_string(proto)
// Fields Modeling
| alter
xdm.event.id = loguid,
Expand Down
2 changes: 1 addition & 1 deletion ...heckpointFirewall/ModelingRules/CheckpointFirewall_1_3/CheckpointFirewall_1_3_schema.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -301,7 +301,7 @@
"is_array": false
},
"proto": {
"type": "string",
"type": "int",
"is_array": false
},
"cefSeverity": {
Expand Down
6 changes: 6 additions & 0 deletions Packs/CheckpointFirewall/ReleaseNotes/2_3_27.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Modeling Rules

##### CheckPoint Firewall Collection

Updated the Modeling Rule schema for check_point_smartdefense_raw dataset.
2 changes: 1 addition & 1 deletion Packs/CheckpointFirewall/pack_metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Check Point Firewall",
"description": "Manage Check Point firewall via API",
"support": "xsoar",
"currentVersion": "2.3.26",
"currentVersion": "2.3.27",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Loading