topic Re: Certificate shown in the public IP address in Firewall and Security Management

Certificate shown in the public IP address

M_Soler — Wed, 27 Mar 2024 12:17:21 GMT

Hi Checkmates,

We have the self-signed VPN certificate appears on our public IP addresses, when I pass the alert I have no portal. What we want is that certificate no longer be displayed on our public IP addresses, so when we access HTTPS on our public IP addresses it does not respond. We have endpoint VPNs, so we cannot block port 443 When we put /* #define ENABLE_TCP_TUNNELING */ in comments this solves our problem but the endpoint VPNs no longer work with the error message "the site is not responding" Does anyone have an idea or a workaround that could help? Thank you.

Regards,

M_Soler.

Re: Certificate shown in the public IP address

the_rock — Wed, 27 Mar 2024 22:09:00 GMT

Might need remote with TAC to look into it.

Andy

Re: Certificate shown in the public IP address

CheckPointerXL — Fri, 05 Apr 2024 16:56:22 GMT

you need to replace certificate with a new one, so new CN and so on

anyway, the information that you are trying to hide, is considered public information and not a vulnerability: https://support.checkpoint.com/results/sk/sk69360