topic Re: Need help for classify TCP/80, TCP/264 on Gateway from external in Firewall and Security Management

Need help for classify TCP/80, TCP/264 on Gateway from external

leangm — Tue, 13 Jul 2021 01:42:09 GMT

Currently on my Checkpoint gateway have service remote VPN and S2S VPN

- remote access using Visitor Mode setting

Can I disable port TCP/80 and TCP/264 from external when disable any impact to remote access?

Anyone can help classify?

Thanks

Re: Need help for classify TCP/80, TCP/264 on Gateway from external

the_rock — Tue, 13 Jul 2021 02:25:39 GMT

Visitor mode by default used port 443, though you dont even need visitor mode unless port 4500 is blocked for some reason.

https://community.checkpoint.com/t5/Remote-Access-VPN/Remote-access-without-visitor-mode-enabled/m-p/77398

Re: Need help for classify TCP/80, TCP/264 on Gateway from external

PhoneBoy — Tue, 13 Jul 2021 03:27:51 GMT

Disabling Visitor Mode means that users will be unable to configure your gateway as a VPN site.
TCP 264 can be safely disabled via: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk132712

Re: Need help for classify TCP/80, TCP/264 on Gateway from external

the_rock — Tue, 13 Jul 2021 03:38:05 GMT

phoneboy is right, I forgot to mention that...you need visitor mode to even create and connect to the site for the very first time. I believe though after that, you dont technically need it.

Re: Need help for classify TCP/80, TCP/264 on Gateway from external

leangm — Tue, 13 Jul 2021 07:27:23 GMT

Thank you all

Re: Need help for classify TCP/80, TCP/264 on Gateway from external

Ruan_Kotze — Tue, 13 Jul 2021 11:25:44 GMT

Having this box checked is one of the GUI defaults CP changed in R81. Will save me a bit of time troubleshooting with new deployments, because I always forget to tick it first time around:-)

Re: Need help for classify TCP/80, TCP/264 on Gateway from external

the_rock — Tue, 13 Jul 2021 11:44:27 GMT

Been there before, I feel the "pain" 😉