Steps to reproduce:

Check Point Next Generation Firewall by SNMP template has an issue triggering the interface down and as well the recovery expression

 

Currently the trigger expression is:

{$NET.IF.CONTROL:"{#IFNAME}"}=1 and last(/Check Point Next Generation Firewall by SNMP/net.if.statusifOperStatus.{#SNMPINDEX})=1 and (last(/Check Point Next Generation Firewall by SNMP/net.if.statusifOperStatus.{#SNMPINDEX},#1)<>last(/Check Point Next Generation Firewall by SNMP/net.if.statusifOperStatus.{#SNMPINDEX},#2))

 

this part is wrong: it should be: <> not =

 

same for the recovery expression:

last(/Check Point Next Generation Firewall by SNMP/net.if.statusifOperStatus.{#SNMPINDEX})<>1 or {$NET.IF.CONTROL:"

{#IFNAME}

"}=0

 

this part is wrong:   it should be: = not <>