topic Re: Users are able to ping the disabled/disconnected interfaces IP-Address in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Users-are-able-to-ping-the-disabled-disconnected-interfaces-IP/m-p/22396#M1695 <HTML><HEAD></HEAD><BODY><P>Thanks Dameon, Will it be a normal behaviour for Gaia operating system as well!?&nbsp;</P></BODY></HTML> Sat, 13 Jan 2018 03:45:24 GMT Arun_R 2018-01-13T03:45:24Z Users are able to ping the disabled/disconnected interfaces IP-Address https://community.checkpoint.com/t5/Firewall-and-Security-Management/Users-are-able-to-ping-the-disabled-disconnected-interfaces-IP/m-p/22394#M1693 <HTML><HEAD></HEAD><BODY><P>Dear Team,</P><P></P><P>I am working on one issue with 4600 appliances in distributed and 13500 are cluster based setup.</P><P></P><P>When I tried to ping the IP-Address what is configured on disabled/disconnected interface were actually working. I am getting ICMP reply from the respective interface.</P><P></P><P>The surprising part is traffic was passing through an active interface. I confirmed, the IP is nowhere configured in my environment.</P><P><BR />As per the <SPAN style="color: #263238; font-size: 13px;">sk41363 article, this is normal behavior due to&nbsp;<SPAN style="color: #000000; background-color: #ffffff; font-size: 14px;">weak ES (End System) model as described in<SPAN>&nbsp;</SPAN></SPAN><A href="https://tools.ietf.org/html/rfc1122" style="color: #905690; background-color: #ffffff; text-decoration: none; font-size: 14px;" target="_blank">RFC1122</A><SPAN style="color: #000000; background-color: #ffffff; font-size: 14px;">.</SPAN></SPAN></P><P></P><P><SPAN style="background-color: #ffffff; color: #000000; font-size: 14px;">Note: I am managing those appliances&nbsp;in Gaia R77.30.</SPAN></P><P></P><P><SPAN style="background-color: #ffffff; color: #000000; font-size: 14px;">Please let me know Is it a normal behavior on Enterprise appliance and High-End appliance as well.</SPAN></P><P></P><P>Regards,</P><P></P><P>ArunHari.R</P></BODY></HTML> Thu, 11 Jan 2018 07:34:23 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Users-are-able-to-ping-the-disabled-disconnected-interfaces-IP/m-p/22394#M1693 Arun_R 2018-01-11T07:34:23Z Re: Users are able to ping the disabled/disconnected interfaces IP-Address https://community.checkpoint.com/t5/Firewall-and-Security-Management/Users-are-able-to-ping-the-disabled-disconnected-interfaces-IP/m-p/22395#M1694 <HTML><HEAD></HEAD><BODY><P>That is normal expected behavior as described in the SK.</P></BODY></HTML> Sat, 13 Jan 2018 02:20:42 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Users-are-able-to-ping-the-disabled-disconnected-interfaces-IP/m-p/22395#M1694 PhoneBoy 2018-01-13T02:20:42Z Re: Users are able to ping the disabled/disconnected interfaces IP-Address https://community.checkpoint.com/t5/Firewall-and-Security-Management/Users-are-able-to-ping-the-disabled-disconnected-interfaces-IP/m-p/22396#M1695 <HTML><HEAD></HEAD><BODY><P>Thanks Dameon, Will it be a normal behaviour for Gaia operating system as well!?&nbsp;</P></BODY></HTML> Sat, 13 Jan 2018 03:45:24 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Users-are-able-to-ping-the-disabled-disconnected-interfaces-IP/m-p/22396#M1695 Arun_R 2018-01-13T03:45:24Z Re: Users are able to ping the disabled/disconnected interfaces IP-Address https://community.checkpoint.com/t5/Firewall-and-Security-Management/Users-are-able-to-ping-the-disabled-disconnected-interfaces-IP/m-p/22397#M1696 <HTML><HEAD></HEAD><BODY><P class="">It's normal for anything running Gaia, yes.</P></BODY></HTML> Sat, 13 Jan 2018 05:08:08 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Users-are-able-to-ping-the-disabled-disconnected-interfaces-IP/m-p/22397#M1696 PhoneBoy 2018-01-13T05:08:08Z