topic Removal hostname information from Gaia Web UI in Firewall and Security Management

Removal hostname information from Gaia Web UI

AntonMakarychev — Wed, 29 Mar 2023 14:21:32 GMT

Hi, Checkmates!

I would like to share with you one tip I found out when I was trying to resolve audit findings.

One of audit findings was that there shouldn't be hostname exposed when Gaia portal page is loaded.

I haven't found any Check Point article regarding that so made my own investigation.

Using Browser developers tools I found out that the file login.js is loading during the page opening.

After that I logged in to the gateway and found the location of the file is /web/htdocs2/js/

And the section which is responsible for hostname displaying:

Instruction how to disable hostname from Check Point Gaia Web UI:

Connect to the gateway
Go to path /web/htdocs2/js/
Backup the login.js file as below

cp login.js login.js_bkp

4. Edit the login.js file using Vi editor

5. Remove the below lines related to hostname

{

xtype: 'displayfield',

id: 'hostname_caption_id',

//cls: 'webui_version_hbox',

value: hostname,

hidden: false,

hideLabel: true,

listeners: {

beforerender: function(){

if (this.value == "") {

this.hidden=true;

}

else {

this.hidden=false;

}

6. Save the file.

7. Restart the httpd2 process on the gateway using below commands:

tell pm httpd2

tell pm httpd2 t

Hope this helps! Thank you!

Update:

You can change the setting also through Web UI settings:

If this checkbox is disabled but you still have hostname shown just enable and then disable it again.

Re: Removal hostname information from Gaia Web UI

the_rock — Wed, 29 Mar 2023 13:44:58 GMT

Thanks for sharing!

Re: Removal hostname information from Gaia Web UI

G_W_Albrecht — Wed, 29 Mar 2023 13:48:47 GMT

You wrote: One of audit findings was that there shouldn't be hostname exposed when Gaia portal page is loaded.

Can you show in a screenshot what you mean ? I never see a hostname for my GWs, only IPs !

Also, why deleting lines at all ? Usually you just comment them out and leave a note there when and why you did that...

Re: Removal hostname information from Gaia Web UI

G_W_Albrecht — Wed, 29 Mar 2023 13:51:05 GMT

Do you understand what is hidden here ?

Re: Removal hostname information from Gaia Web UI

the_rock — Wed, 29 Mar 2023 13:57:00 GMT

Lets let @AntonMakarychev confirm, but I believe he may be referring to below:

Re: Removal hostname information from Gaia Web UI

AntonMakarychev — Wed, 29 Mar 2023 14:01:39 GMT

That's hostname that will be hidden. As a potential intruder will be able to load this page and get information about naming convention in the organisation.

Re: Removal hostname information from Gaia Web UI

AntonMakarychev — Wed, 29 Mar 2023 14:03:28 GMT

Regarding deletion, yes you can comment this section - the result will be the same.

Re: Removal hostname information from Gaia Web UI

G_W_Albrecht — Wed, 29 Mar 2023 14:06:53 GMT

I have defined a GW hostname but never had anything at that spot !

Re: Removal hostname information from Gaia Web UI

AntonMakarychev — Wed, 29 Mar 2023 14:05:16 GMT

I attached the screenshot, the hostname is exposed in the login page. Here it doesn't make sense to hide anything as an intruder needs to know credentials to get to this page.

Re: Removal hostname information from Gaia Web UI

G_W_Albrecht — Wed, 29 Mar 2023 14:05:25 GMT

He talks about something shown before login.

Re: Removal hostname information from Gaia Web UI

the_rock — Wed, 29 Mar 2023 14:06:17 GMT

Me neither, checked 5 devices 🙂

Re: Removal hostname information from Gaia Web UI

AntonMakarychev — Wed, 29 Mar 2023 14:17:06 GMT

Actually I found this setting in the portal:

It was disabled by default but hostname was shown.

After I enabled/disabled it once again the hostname disappeared.

Re: Removal hostname information from Gaia Web UI

the_rock — Wed, 29 Mar 2023 14:21:01 GMT

100% correct...I found one appliance in my lab where it shows and that setting is the reason 👍

Re: Removal hostname information from Gaia Web UI

AntonMakarychev — Wed, 29 Mar 2023 15:03:09 GMT

But anyway it is good to know how you can customise the login page.

Re: Removal hostname information from Gaia Web UI

the_rock — Wed, 29 Mar 2023 14:38:39 GMT