Starting Checkpoint Firewall with Deny All 1

[hunterfs]

I am running a Checkpoint NG FW-1 with my organization and I was sondering if Checkpoint still allowed the firewall to start without a configuration in a deny all mode. For example, there is a power outage or unexpected re-boot, how do you configure the firewall to not allow traffic until an admin loads the proper configuration.

Thanks in advance,
Frederick

 

[Piloria]

The default rule set fot the firewall is Deny all.
the only reason you put a catch all rule at the end of the rule base is to provide you with a log of all failed connections (assuming you set your catch all rule to log)
Also when the firewall reboots part of the load sequence is to apply the current rule base