https://community.checkpoint.com/t5/Firewall-and-Security-Management/gprs-protocol-issue/m-p/132547#M19655 <P>good morning,<BR />this morning I noticed a certain alert in the logs. the log that I show below with the respective firewall rule, points out to me that anyone who uses a tcp protocol of any type with the certain range of open ports can enter that server. is there a way to block access to the tcp-gprs protocol only? or is it possible to limit communications from certain ssid? also, did I correctly interpret what happened in that log? the alert simply warned me that someone used the kerberos protocol, right? any advice is welcome, thanks</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-left" image-alt="Catrtgrtgtura.PNG" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/14067i88AF14CC35F9BB3B/image-size/large?v=v2&amp;px=999" role="button" title="Catrtgrtgtura.PNG" alt="Catrtgrtgtura.PNG" /></span></P> Mon, 25 Oct 2021 13:02:53 GMT fabiofabio 2021-10-25T13:02:53Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/gprs-protocol-issue/m-p/132547#M19655 <P>good morning,<BR />this morning I noticed a certain alert in the logs. the log that I show below with the respective firewall rule, points out to me that anyone who uses a tcp protocol of any type with the certain range of open ports can enter that server. is there a way to block access to the tcp-gprs protocol only? or is it possible to limit communications from certain ssid? also, did I correctly interpret what happened in that log? the alert simply warned me that someone used the kerberos protocol, right? any advice is welcome, thanks</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-left" image-alt="Catrtgrtgtura.PNG" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/14067i88AF14CC35F9BB3B/image-size/large?v=v2&amp;px=999" role="button" title="Catrtgrtgtura.PNG" alt="Catrtgrtgtura.PNG" /></span></P> Mon, 25 Oct 2021 13:02:53 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/gprs-protocol-issue/m-p/132547#M19655 fabiofabio 2021-10-25T13:02:53Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/gprs-protocol-issue/m-p/132548#M19656 <P>Are you using default CP service or did you end up creating custom one? The reason I ask is because with custom service, you can choose the actual protocol and if you select none, then it should not do regular inspection for that service, like it normally would.</P> Mon, 25 Oct 2021 13:08:47 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/gprs-protocol-issue/m-p/132548#M19656 the_rock 2021-10-25T13:08:47Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/gprs-protocol-issue/m-p/132594#M19661 <P>do you mean the tcp_gprs service that you see in the screen? I created a new one with a range of ports</P> Tue, 26 Oct 2021 07:40:40 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/gprs-protocol-issue/m-p/132594#M19661 fabiofabio 2021-10-26T07:40:40Z