Skip to content
This repository has been archived by the owner on Dec 29, 2020. It is now read-only.

The options for product filter argument does not cover all the products #29

Open
hzhzhang opened this issue Apr 5, 2017 · 3 comments
Open

Comments

@hzhzhang
Copy link

hzhzhang commented Apr 5, 2017

The filter product argument is hardcoded as follow:

if (!((strcmp (argumentsinglevalue, "VPN-1 & FireWall-1") == 0)
                   || (strcmp (argumentsinglevalue, "SmartDefense") == 0)
                   || (strcmp (argumentsinglevalue, "URL Filtering") == 0)
                   || (strcmp (argumentsinglevalue, "Identity Awareness") == 0)
                   || (strcmp (argumentsinglevalue, "Identity Logging") == 0)
                   || (strcmp (argumentsinglevalue, "New Anti Virus") == 0)
                   || (strcmp (argumentsinglevalue, "FDE") == 0)
                   || (strcmp (argumentsinglevalue, "Anti Malware") == 0)
                   || (strcmp (argumentsinglevalue, "Application Control") == 0)
                   || (strcmp (argumentsinglevalue, "Application Control(+)URL Filtering") == 0)
                   || (strcmp (argumentsinglevalue, "Connectra") == 0)
                   || (strcmp (argumentsinglevalue, "ESOD") == 0)
                   || (strcmp (argumentsinglevalue, "Linux OS") == 0)
                   || (strcmp (argumentsinglevalue, "Policy Server") == 0)
                   || (strcmp (argumentsinglevalue, "Security Gateway/Management") == 0)
                   || (strcmp (argumentsinglevalue, "Syslog") == 0)
                   || (strcmp (argumentsinglevalue, "Threat Emulation") == 0)
                   || (strcmp (argumentsinglevalue, "Threat Extraction") == 0))

It does not cover all the products, for example: System Monitor, HTTPS Inspection which are not included in the acceptable options.
This issue exist both in audit and non_audit logs.

@adepasquale
Copy link
Contributor

Hello, thanks for reporting. This issue is similar to #13. Do you have a list of products to add?

@hzhzhang
Copy link
Author

hzhzhang commented Apr 6, 2017

I don't have the full list of products. Maybe we can reach CheckPoint side to get the full list.

@adepasquale
Copy link
Contributor

Or we can simply remove the condition which checks if the filter is valid against a whitelist.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants