topic Re: Domain Object Configuration Query and Requirement in Firewall and Security Management

Domain Object Configuration Query and Requirement

Chinmaya_Naik — Wed, 17 Feb 2021 17:17:05 GMT

Hi Team,

Gateway OS Version:R80.30

Current Traffic Flow -----> CP Firewall >> Proxy >> User Machine

On Check Point Firewall only firewall blade is enable.

We only configured IP based rule on Check Point.

For a specific requirement we create a URL filtering rule on Proxy for example "abc.com" but "abc.com" is resolved multiple public IP address (Dynamic IP address).

Now creating the rule for multiple resolved IP address challenge so we create a Domain Object on Check Point.

For testing I setup a LAB.

I am create a ".checkpoint.com" Domain Object for testing but still not working.

Also I test with Unchecked the FQDN.

Kindly help to resolved the issue.

Regards

@Chinmaya_Naik

Re: Domain Object Configuration Query and Requirement

PhoneBoy — Thu, 18 Feb 2021 03:44:31 GMT

So the user is communicating to the proxy, which then forwards to the Internet thru the Check Point gateway?
Have you confirmed DNS is configured and resolving the same as the proxy?

Re: Domain Object Configuration Query and Requirement

Kaspars_Zibarts — Thu, 18 Feb 2021 07:43:23 GMT

1. Is your lab user using proxy?

2. What is "win10" in your rulebase? Proxy or client?

You need to work out lab flow.

FQDN object is set correctly

You can check what IPs gateway has learned with command line:

domains_tools -d checkpoint.com

Re: Domain Object Configuration Query and Requirement

Chinmaya_Naik — Tue, 06 Apr 2021 09:40:41 GMT

Hi Team,

Thanks for the suggestion yes now its working fine when I create a fresh setup with different a machine😊

@Chinmaya_Naik