topic Re: HTTPS Server for Smart Console Extensions in SmartConsole Extensions

Easy HTTPS Server

HeikoAnkenbrand — Mon, 26 Jan 2026 07:58:25 GMT

Why this HTTPS server

From a security standpoint, it makes little sense to launch Check Point SmartConsole Extensions directly from the internet. When extensions are executed remotely, there is no practical opportunity to inspect the code for malware or hidden backdoors before it runs in a privileged management environment. This introduces an unnecessary attack surface into the security infrastructure.

To address this risk, I built a small local web server that allows SmartConsole Extensions to be started quickly and securely from the local workstation. The idea is simple: keep the entire execution chain under your control and ensure that every extension can be reviewed before it is used.

Short overview

Small, compact HTTPS server

Can be started on any PC with administrative privileges

No daemon or service installation required for port 443

Includes an integrated file manager for managing the web root

Self-signed HTTPS key and certificate are provided

No configuration files required

Install

On Windows systems, the first step is to install “HTTPS Server PRO” from the link provided below. After installation, start the web server locally with administrative privileges and upload the SmartConsole Extension into the built-in File Manager.

Once the file is hosted locally, the extension can be opened in SmartConsole via a local HTTPS URL, for example:

https://localhost/<Name_of_SmartConsole_App>

This approach ensures that extensions are executed only from a trusted local source, enables prior code inspection, and significantly reduces the risk of introducing malicious or manipulated components into the management plane (SMS).

Download Link:
HTTPS Server PRO

SHA256:
F82383AC7F38F5F6AD1514FF32E98909CBA993E6F448B2E9AAD700CC29D5B47C

In the next comment, I have included a video that shows how it works.

Re: WEB Server for Smart Console Extensions

HeikoAnkenbrand — Tue, 20 Jan 2026 11:48:14 GMT

In this short video, I demonstrate the essential steps required to get started with the tool and integrate it securely into your daily workflow.

(view in My Videos)

Re: WEB Server for Smart Console Extensions

Sven_Ott — Tue, 20 Jan 2026 12:38:46 GMT

I have reviewed the video. It looks very interesting. Can the HTTPS server also be used as a standard web server without Smart Console extensions?

Re: WEB Server for Smart Console Extensions

the_rock — Tue, 20 Jan 2026 13:06:16 GMT

Excellent!

Re: WEB Server for Smart Console Extensions

Vincent_Bacher — Tue, 20 Jan 2026 13:23:41 GMT

I believe this small HTTPS server can serve all files and allow retrieval via HTTPS. That's about it. However, that's all that's needed here.

Re: WEB Server for Smart Console Extensions

HeikoAnkenbrand — Tue, 20 Jan 2026 16:56:25 GMT

You can execute any HTML files located in the web root via HTTP GET requests.
Yes, this makes it a fully functional lightweight HTTPS server.

TIP:
If you place an index.html file in the web root directory, it will be served automatically by default.

Re: WEB Server for Smart Console Extensions

HeikoAnkenbrand — Wed, 21 Jan 2026 09:43:20 GMT

Exactly right. The tool provides files via HTTPS.

Re: WEB Server for Smart Console Extensions

mylly — Wed, 21 Jan 2026 10:08:25 GMT

Does the tool also support HTTP?

Re: HTTPS Server for Smart Console Extensions

PhoneBoy — Wed, 21 Jan 2026 22:07:20 GMT

Weirdly enough, one of the only programs I ever wrote in Java back in the 90s was...a local web server.

Re: WEB Server for Smart Console Extensions

HeikoAnkenbrand — Thu, 22 Jan 2026 21:33:59 GMT

No, but you can download the same tool from my website as an HTTP server. It works exactly the same as the HTTPS server;-)

Download link for the HTTP server:
HTTP Server PRO

Re: HTTPS Server for Smart Console Extensions

HeikoAnkenbrand — Fri, 23 Jan 2026 09:18:43 GMT

Then I'm 36 years too late 🙂

Re: HTTPS Server for Smart Console Extensions

Jarvis_Lin — Fri, 23 Jan 2026 16:06:25 GMT

Maybe it can serve as a network feeds / IoC feeds source.

Re: HTTPS Server for Smart Console Extensions

Vincent_Bacher — Fri, 23 Jan 2026 16:08:12 GMT

For testing purposes, certainly.

Re: HTTPS Server for Smart Console Extensions

HeikoAnkenbrand — Sat, 24 Jan 2026 15:25:14 GMT

Yes, you can use it for the following purposes:
- Easy web server without configuration
- Source for dynamic objects, e.g., as a text file
- As already discussed, for Smart Extensions
- Or for IoC feeds