Hey everyone! I've been trying to bridge the gap between our security scans and our Check Point policy. Manually creating object groups for vulnerable assets every time a scan runs was killing my productivity 😅
I know this is a bit outside my usual email marketing lane, but I wrote a Python script to parse our Nessus output and auto-generate object groups for Check Point's SmartConsole. It basically takes the CSV, filters for critical/high vulnerabilities, and creates a text file with the correct command syntax. It's saved me hours this week.
Has anyone else tried something like this? I'm worried my logic might be too simpleβlike, what if an asset is in multiple vulnerability groups? Also, is there a better way to get this data directly into the API instead of making command blocks?
Would love any feedback from people who actually know what they're doing with Quantum!