topic Re: Disable All Traffic Inspection in Firewall and Security Management

Disable All Traffic Inspection

Bernardes — Sun, 03 Sep 2023 14:57:29 GMT

Dear all,

Is there a way to make the Check Point firewall act only as a router for a specific scope?

I know it's possible to define network scopes and disable, for example, the inspection of Threat Prevention blades, but even so, traffic will still be inspected to match with a rule in the rule base and decide what to do.

But what I would like to know is if it is possible to completely turn off any type of inspection for one or more specific network segments, so that the firewall only routes these packets and nothing else, to save processing power.

Is this possible? If so, how would it be done?

Thank You!

Re: Disable All Traffic Inspection

Chris_Atkinson — Sun, 03 Sep 2023 15:44:53 GMT

Look into fast_accel refer: sk156672

Re: Disable All Traffic Inspection

CheckPointerXL — Mon, 04 Sep 2023 08:57:18 GMT

i think the Null_Profile is the best approach here

Re: Disable All Traffic Inspection

Timothy_Hall — Mon, 04 Sep 2023 17:28:35 GMT

Fast_accel would be more appropriate than a null profile in this case. A null profile only disables Deep Inspection performed by Threat Prevention, but other Access Control Medium Path blades such as APCL/URLF will still perform their Deep Inspection duties on the traffic. Forcing the traffic out of the Medium Path into the fastpath via fast_accel completely disables all Deep Inspection for both Access Control & Threat Prevention. The only caveat is that traffic requiring F2F/slowpath handling cannot be forced into the fastpath.

Re: Disable All Traffic Inspection

CheckPointerXL — Tue, 05 Sep 2023 12:20:21 GMT

thanks for clarification