topic Re: Online Certificate Status Protocol / Application control in Firewall and Security Management

Online Certificate Status Protocol / Application control

NilsKS — Sat, 08 Jan 2022 10:20:27 GMT

Hi,

I am trying to limit outbound web traffic from our Windows servers to Windows update / Microsoft services only, using dymamic objects in the application control blade. Check Point R81.40.

I am not able to figure out how to enable Online Certificate Status Protocol which uses port 80 to communicate.

Any pointers / hints on how to proceed?

Best,

Nils

Re: Online Certificate Status Protocol / Application control

Chris_Atkinson — Sat, 08 Jan 2022 11:03:57 GMT

Have you tried creating a rule permitting the OCSP object with destination Internet?

Re: Online Certificate Status Protocol / Application control

NilsKS — Sat, 08 Jan 2022 11:46:41 GMT

This was embarrassing; I was confident that I had looked for the OCSP object, I must have been temporarily blind when I looked.

Thanks a lot!!

Best,

Nils