topic Re: How to add some ip address to stateful exception list in Firewall and Security Management

How to add some ip address to stateful exception list

cphseric — Wed, 04 Jan 2023 11:17:11 GMT

For some reason, we may need to add some APPs into the exception list when enable stateful inspection. Can you please advise where to add those exception list ? How to do it in both Gui or CLI?

Re: How to add some ip address to stateful exception list

Chris_Atkinson — Wed, 04 Jan 2023 12:16:21 GMT

Before you do have you reviewed sk180364 for relevance?

If you still need to then please look into sk11088.

Refer also:

https://community.checkpoint.com/t5/General-Topics/Disable-Stateful-Inspection/td-p/120107

Re: How to add some ip address to stateful exception list

cphseric — Thu, 05 Jan 2023 14:34:08 GMT

Thanks Chris for your reply . So if the user.def file is only place to add this exception ip address for stateful inspection. Is it possible to do that in GUI like smart console ?

Re: How to add some ip address to stateful exception list

the_rock — Thu, 05 Jan 2023 14:58:35 GMT

Im pretty positive you cant do this via smart console. The best you could do is below in global properties, but ONLY lets you add the gateway itself.

Andy

Re: How to add some ip address to stateful exception list

PhoneBoy — Thu, 05 Jan 2023 19:59:18 GMT

There is no SmartConsole method for excluding a specific flow from stateful inspection.
Having said that, there must still be rules to permit the necessary traffic.