topic Re: Block urls for some security zones in Firewall and Security Management

Block urls for some security zones

king_slavcho — Mon, 20 Jun 2022 11:05:29 GMT

Hello,

I wanted to ask how to block some URLs on the smartendpoint or smart console on my server. I can not find a good tutorial or explanation to do it. I see that i have to assign a security group to the access policy rule but even that i do not know how to configure it.. I also saw that i have to configure a security zone but i do not really see the option where i can put the ip addresses that should be in that security zone. Can someone explain me in details what should i do in order to block an URL just for my internal network? I am using smart console/endpoint 81.10 version.

Thank you

Re: Block urls for some security zones

Sorin_Gogean — Mon, 20 Jun 2022 11:47:04 GMT

hey,

are you currently using SmartConsole to define rules in order to allow/deny certain traffic ?

I'm asking because from your post it's not clear you know how to do that.

If the answer is YES, then the same way you define rule that would block the URL's you want. No need for Security Zones, if you don't use them in your environment. Just use as a source single IP's, IP ranges, or groups that include more .

(for destination you can define Custom URL/Apps that will include the URL's you want to block)

Ty,

Re: Block urls for some security zones

king_slavcho — Sun, 26 Jun 2022 17:52:01 GMT

I haven't been using SmartConsole for defining rules to allow/deny traffic.. I mean i haven't been defining rules at all.. My question was: how can i even define them.. I want to block certain websites on all endpoints but with exceptions on some endpoints.. Can you tell me how to do that.. Thank you

Re: Block urls for some security zones

the_rock — Sun, 26 Jun 2022 21:52:29 GMT

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk112249

Re: Block urls for some security zones

Chris_Atkinson — Sun, 26 Jun 2022 23:48:12 GMT

To clarify are you using security gateway as the location of your posts suggests or Endpoint security, if the later please see:

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/Web-and-Files-Protection.htm