topic Re: Is that possible to have CheckPoint gateway working like a Sock5 Proxy Server? in Firewall and Security Management

Is that possible to have CheckPoint gateway working like a Sock5 Proxy Server?

MTS — Thu, 13 Jan 2022 06:12:32 GMT

Hello,

Just find few KN related to configuring CheckPoint as a HTTP/HTTPS Proxy.

But would like to Proxy the DNS to end user as well, and seems Sock 5 with Firefox working well for this.

Might I know if CheckPoint support Sock5 also?

Thank you in advance.

Re: Is that possible to have CheckPoint gateway working like a Sock5 Proxy Server?

G_W_Albrecht — Thu, 13 Jan 2022 08:01:56 GMT

The reason is that using CP GWs as a proxy is mostly not a good idea at all - out of my 13 y experience i would suggest to better install a Socks5 server in the internal network ! Also look for the limitations here: sk110013: How to configure Check Point Security Gateway as HTTP/HTTPS Proxy and sk92482: Performance impact from enabling HTTP/HTTPS Proxy functionality.

Re: Is that possible to have CheckPoint gateway working like a Sock5 Proxy Server?

Timothy_Hall — Thu, 13 Jan 2022 13:01:16 GMT

Agree with Gunter, configuring a Check Point gateway as an explicit HTTP/HTTPS Proxy is not a good idea. All traffic being proxied will be unaccelerated (F2F path) and also be handled by a security server process thus slowing things down even more. This was mentioned in my 2021 IPS/AV/ABOT Immersion video series:

Re: Is that possible to have CheckPoint gateway working like a Sock5 Proxy Server?

genisis__ — Thu, 13 Jan 2022 13:36:21 GMT

I've asked this on a few occasions. In older versions it was possible to do it apparently, but not anymore. I know Fortigate can act as a SOCKS5 proxy.