topic Re: What actions are required to control the 'IP in IP' protocol at checkpoint? in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/What-actions-are-required-to-control-the-IP-in-IP-protocol-at/m-p/195978#M36553 <P>Thank you for your reply</P><P>I also think it should work normally.</P><P>However, I am suspicious that the 'Match by' protocol is displayed as icmp, so I am confused as to whether that is correct.</P><P>Is there a case for controlling the 'IP in IP' protocol at checkpoint?</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 24 Oct 2023 02:51:37 GMT ChoiYunSoo 2023-10-24T02:51:37Z What actions are required to control the 'IP in IP' protocol at checkpoint? https://community.checkpoint.com/t5/Firewall-and-Security-Management/What-actions-are-required-to-control-the-IP-in-IP-protocol-at/m-p/195888#M36533 <P>Hi</P><P>&nbsp;</P><P>Can Checkpoint control the 'IP in IP' protocol?</P><P>&nbsp;</P><P>'IP in IP' is an IP tunneling protocol that encapsulates one IP packet in another IP packet.</P><P>And if you search IP in IP in Checkpoint, you can check the corresponding protocol in Application/Categories</P><P>&nbsp;</P><P>However, the 'matched by protocol' of the protocol is icmp.</P><P>There are some things I don't know about how the 'ip in ip' protocol works, but the fact that 'matched by protocol' is icmp remains a question.</P><P>&nbsp;</P><P>Checkpoint If I apply 'ip in ip' from 'applications' categories to the rule, will I be able to get the desired action?</P><P>And if there is a way to use only the service object without using the application policy, please let me know.</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="1.png" style="width: 538px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/22915i3F7359B8DEE65A7A/image-size/large?v=v2&amp;px=999" role="button" title="1.png" alt="1.png" /></span></P><P>&nbsp;</P><P>&nbsp;</P> Mon, 23 Oct 2023 09:25:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/What-actions-are-required-to-control-the-IP-in-IP-protocol-at/m-p/195888#M36533 ChoiYunSoo 2023-10-23T09:25:17Z Re: What actions are required to control the 'IP in IP' protocol at checkpoint? https://community.checkpoint.com/t5/Firewall-and-Security-Management/What-actions-are-required-to-control-the-IP-in-IP-protocol-at/m-p/195891#M36534 <P>This should work with the default settings as shown</P> Mon, 23 Oct 2023 10:16:11 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/What-actions-are-required-to-control-the-IP-in-IP-protocol-at/m-p/195891#M36534 _Val_ 2023-10-23T10:16:11Z Re: What actions are required to control the 'IP in IP' protocol at checkpoint? https://community.checkpoint.com/t5/Firewall-and-Security-Management/What-actions-are-required-to-control-the-IP-in-IP-protocol-at/m-p/195895#M36538 <P>Afaik 'IP in IP' protocol is only used for experimental purposes today as there are many newer possibilities to achieve tunneling available. So why would you use this in rule base ?</P> Mon, 23 Oct 2023 10:24:21 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/What-actions-are-required-to-control-the-IP-in-IP-protocol-at/m-p/195895#M36538 G_W_Albrecht 2023-10-23T10:24:21Z Re: What actions are required to control the 'IP in IP' protocol at checkpoint? https://community.checkpoint.com/t5/Firewall-and-Security-Management/What-actions-are-required-to-control-the-IP-in-IP-protocol-at/m-p/195978#M36553 <P>Thank you for your reply</P><P>I also think it should work normally.</P><P>However, I am suspicious that the 'Match by' protocol is displayed as icmp, so I am confused as to whether that is correct.</P><P>Is there a case for controlling the 'IP in IP' protocol at checkpoint?</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 24 Oct 2023 02:51:37 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/What-actions-are-required-to-control-the-IP-in-IP-protocol-at/m-p/195978#M36553 ChoiYunSoo 2023-10-24T02:51:37Z Re: What actions are required to control the 'IP in IP' protocol at checkpoint? https://community.checkpoint.com/t5/Firewall-and-Security-Management/What-actions-are-required-to-control-the-IP-in-IP-protocol-at/m-p/195979#M36554 <P>Your answer and general explanation were very helpful. Thank you.</P><P>But the last question, 'Why would you use this in rule base?' I don't understand the intent of the question.</P><P>I would appreciate it if you could tell me what your intention was with your question.</P> Tue, 24 Oct 2023 02:53:08 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/What-actions-are-required-to-control-the-IP-in-IP-protocol-at/m-p/195979#M36554 ChoiYunSoo 2023-10-24T02:53:08Z