topic Re: Access from internet for URL path in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212416#M40320 <P>I tried different options, but unfortunately it didn't solve the problem.</P> Fri, 26 Apr 2024 16:35:39 GMT Sergey_Anikeev 2024-04-26T16:35:39Z Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212140#M40259 <P>Hello colleague!</P><P>Please help me understand how to implement the following settings.</P><P>Our system<BR />SMS Gaia R81.20<BR />ClusterXL Gaia R81.10</P><P><BR />Our Web resource has been published on the Internet and is available at (as an example)<BR /><A href="https://web-site.com/" target="_blank">https://web-site.com/</A></P><P>We want to leave access only for this path (from Internet)<BR /><A href="https://web-site.com/folder/data/" target="_blank">https://web-site.com/folder/data/</A></P><P>and deny access along the path:<BR /><A href="https://web-site.com/folder/catalog/" target="_blank">https://web-site.com/folder/catalog/</A></P><P><BR />Is this possible to do using rules on the gateway?</P> Wed, 24 Apr 2024 08:08:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212140#M40259 Sergey_Anikeev 2024-04-24T08:08:09Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212210#M40269 <P>Yes, using a custom application/site and HTTPS Inspection (required to see the URLs accessed).</P> Wed, 24 Apr 2024 16:06:45 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212210#M40269 PhoneBoy 2024-04-24T16:06:45Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212215#M40270 <P>You got the answer from phoneboy, for this, you 100% need https inspection.</P> <P>Andy</P> Wed, 24 Apr 2024 17:24:24 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212215#M40270 the_rock 2024-04-24T17:24:24Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212218#M40271 <P>URL is encrypted so what the other guys said I agree with. In this case it will be a 'reverse HTTPS inspection'.</P> <P>So you need to intercept the traffic towards the public server&nbsp;</P> Wed, 24 Apr 2024 19:02:53 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212218#M40271 Lesley 2024-04-24T19:02:53Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212244#M40273 <P>Am I correct in understanding that the rule structure itself should look like this (as an example)?</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="1.JPG" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/25394i76CEF0963F997893/image-size/large?v=v2&amp;px=999" role="button" title="1.JPG" alt="1.JPG" /></span></P><P><BR />P.S.</P><P>SSL inspections activated.</P> Thu, 25 Apr 2024 07:18:41 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212244#M40273 Sergey_Anikeev 2024-04-25T07:18:41Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212264#M40277 <P>That should work or what I always do is say you want to block anything facebook, I just put it as *facebook* in URL list.</P> <P>Andy</P> Thu, 25 Apr 2024 10:57:46 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212264#M40277 the_rock 2024-04-25T10:57:46Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212357#M40307 <P>Unfortunately rule 1.1 does not work.<BR />The traffic eventually goes through rule 1.2</P> Fri, 26 Apr 2024 07:07:42 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212357#M40307 Sergey_Anikeev 2024-04-26T07:07:42Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212405#M40316 <P>Please show a full log card (mask sensitive data) where that happens (i.e. traffic matches 1.2).<BR />Please also show the certificate used for the website in question when the traffic is accepted.<BR /><BR /></P> Fri, 26 Apr 2024 16:19:59 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212405#M40316 PhoneBoy 2024-04-26T16:19:59Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212408#M40318 <P>Just do wildcard, it will work.</P> <P>Andy</P> Fri, 26 Apr 2024 16:25:36 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212408#M40318 the_rock 2024-04-26T16:25:36Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212415#M40319 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="1.JPG" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/25418i56C5A79BD8333E64/image-size/large?v=v2&amp;px=999" role="button" title="1.JPG" alt="1.JPG" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2.JPG" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/25419iC4CCD34B412BFEBC/image-size/large?v=v2&amp;px=999" role="button" title="2.JPG" alt="2.JPG" /></span></P> Fri, 26 Apr 2024 16:35:23 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212415#M40319 Sergey_Anikeev 2024-04-26T16:35:23Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212416#M40320 <P>I tried different options, but unfortunately it didn't solve the problem.</P> Fri, 26 Apr 2024 16:35:39 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212416#M40320 Sergey_Anikeev 2024-04-26T16:35:39Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212419#M40321 <P>If you are allowed to send me website in private message, so I can test it in the lab?</P> <P>Andy</P> Fri, 26 Apr 2024 16:45:23 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212419#M40321 the_rock 2024-04-26T16:45:23Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212433#M40325 <P>That only answers the first question.<BR />For the second question, we'll need to know what the actual site you're trying to configure blocking on versus what the certificate for that site says.</P> Fri, 26 Apr 2024 18:12:15 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212433#M40325 PhoneBoy 2024-04-26T18:12:15Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212453#M40333 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="4.JPG" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/25422iEF0C47A0870A9B95/image-size/large?v=v2&amp;px=999" role="button" title="4.JPG" alt="4.JPG" /></span></P> Sat, 27 Apr 2024 07:33:32 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212453#M40333 Sergey_Anikeev 2024-04-27T07:33:32Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212465#M40336 <P>I don't see how you can test this given that the site is located in our perimeter.<BR />Or did I misunderstand the question?</P> Sat, 27 Apr 2024 14:17:22 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212465#M40336 Sergey_Anikeev 2024-04-27T14:17:22Z Re: Access from internet for URL path https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212640#M40384 <P>You're probably in TAC territory now: <A href="https://help.checkpoint.com" target="_blank">https://help.checkpoint.com</A>&nbsp;</P> Mon, 29 Apr 2024 20:39:06 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Access-from-internet-for-URL-path/m-p/212640#M40384 PhoneBoy 2024-04-29T20:39:06Z