topic Re: OPEN EXTERNAL PORTS ON CHECKPOINT SECURITY GATEWAY in Firewall and Security Management

OPEN EXTERNAL PORTS ON CHECKPOINT SECURITY GATEWAY

K_montalvo — Fri, 23 Jul 2021 15:12:21 GMT

Hello Friends,

I need to closed all external ports facing the internet of a Check Point 5100 Security Gateway running R80.30. I already tried sk105740 choosing (Through internal Interfaces) but did not worked for me. I can keep seeing port 80,443,264 exposed to the internet. I want to try the strange NAT solution but before i want to confirm if we have any other way to fix this issue? Any help is very appreciated.

Thanks,

Re: OPEN EXTERNAL PORTS ON CHECKPOINT SECURITY GATEWAY

the_rock — Fri, 23 Jul 2021 17:34:40 GMT

Is it being accepted on specific rule(s)?

Re: OPEN EXTERNAL PORTS ON CHECKPOINT SECURITY GATEWAY

PhoneBoy — Sat, 24 Jul 2021 00:23:24 GMT

80/443 are definitely implied rules.
264 can be disabled by applying a recent JHF according to: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk132712&partition=Advanced&product=Mobile
80, you can disable with: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165937&partition=Advanced&product=Quantum
If you have Remote Access users at all, disabling port 443 will prevent end users from adding your gateway as a site in their client.