topic Re: SSH Deep Packet Inspection in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/SSH-Deep-Packet-Inspection/m-p/214002#M40848 <P>Hi! Did you manage to implement ssh inspection?</P> Mon, 13 May 2024 09:38:38 GMT ww1m6 2024-05-13T09:38:38Z SSH Deep Packet Inspection https://community.checkpoint.com/t5/Firewall-and-Security-Management/SSH-Deep-Packet-Inspection/m-p/197005#M36759 <P>Hello,</P><P>We're planning to implement SSH Deep Packet Inspection for the&nbsp;incoming traffic as mentioned here.</P><P><BR /><A href="https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_ThreatPrevention_AdminGuide/Topics-TPG/Using-SSH-Inspection.htm" target="_blank">https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_ThreatPrevention_AdminGuide/Topics-TPG/Using-SSH-Inspection.htm</A></P><P>We've multiple servers allowing SSH incoming traffic from the Internet to DMZ.<BR />1. Can you pls let me know how to implement this for any test connection, instead of globally for all servers?<BR />2. Just by identifying the SSH-tunnelling, does it going to automatically drop it or any rules required?</P> Fri, 03 Nov 2023 08:36:37 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SSH-Deep-Packet-Inspection/m-p/197005#M36759 SriNarasimha005 2023-11-03T08:36:37Z Re: SSH Deep Packet Inspection https://community.checkpoint.com/t5/Firewall-and-Security-Management/SSH-Deep-Packet-Inspection/m-p/197012#M36763 <P>Your linked Admin Guide shows how to Add an inspected SSH server - repeat for multiple servers. Current rules should work as before, added SSH servers are are inspected.</P> Fri, 03 Nov 2023 09:40:43 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SSH-Deep-Packet-Inspection/m-p/197012#M36763 G_W_Albrecht 2023-11-03T09:40:43Z Re: SSH Deep Packet Inspection https://community.checkpoint.com/t5/Firewall-and-Security-Management/SSH-Deep-Packet-Inspection/m-p/214002#M40848 <P>Hi! Did you manage to implement ssh inspection?</P> Mon, 13 May 2024 09:38:38 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SSH-Deep-Packet-Inspection/m-p/214002#M40848 ww1m6 2024-05-13T09:38:38Z