topic Re: Checkpoint can not block Offensive Language content in Firewall and Security Management

Checkpoint can not block Offensive Language content

Phillip-83 — Thu, 30 May 2024 16:45:52 GMT

Hello everyone,

Currently, I'm introducing the Checkpoint FW product to a school.
Every feature is relevant until they want to check out Filtering feature:
- They are using the following website for testing: http://testfiltering.com/
- I have implemented relevant categories, http/https inspection,..., however when performing "run test", the test results still do not prevent access to Offensive Language.
- I will leave the video with the configuration and perform the test below (video in file .pptx):

Now competitor Fortinet is also pitching to that school, and they passed the test, pictured below:

If our solution can pass this test, that school will be very likely to buy the solution, because they are more favorable towards Checkpoint than Fortinet.
So please help me, is there any way to configure and pass the test?

Thank you very much, everyone.

Best regards.

Re: Checkpoint can not block Offensive Language content

_Val_ — Fri, 31 May 2024 11:39:11 GMT

What do you configure in the policy to prevent those categories?

Re: Checkpoint can not block Offensive Language content

Lesley — Fri, 31 May 2024 13:29:01 GMT

Hi!

What blades you have enabled to achieve this goal? I assume you want to use URL filtering and application control?

At this moment I am not able to find a URL filtering category related to bad language. Is does also not make sense I think. For example if there is a bad word in a youtube video comment this video then needs to be blocked? Maybe this has education purposes. So I would reconsider to advise against blocking this category.

Also I found the DLP (data leak prevention) blade has an option for blocking bad language. Below screenshots as reference.

Re: Checkpoint can not block Offensive Language content

Phillip-83 — Sat, 01 Jun 2024 12:03:04 GMT

Hi _Val_,
You can check configure on the .pptx file attachment.

Re: Checkpoint can not block Offensive Language content

the_rock — Sat, 01 Jun 2024 13:07:08 GMT

Logically, to me anyway, if you can find category that matches offensive language, you can add it to be blocked. I cant recall now what closest one to it would be, but its easy to tell once you hit plus sign to add them. Otherwise, I would confirm with TAC.

Andy

Re: Checkpoint can not block Offensive Language content

_Val_ — Sat, 01 Jun 2024 13:36:53 GMT

And what made you think I did not check it before asking a question?

You put there a video of the test. It is virtually impossible to see in the video how you configured your URLF policy.

Re: Checkpoint can not block Offensive Language content

_Val_ — Sat, 01 Jun 2024 13:44:10 GMT

Anyhow, make sure you add these categories to the block rule, and see if it makes any difference.

On top, I hope your HTTPS Inspection is on.

Re: Checkpoint can not block Offensive Language content

_Val_ — Sat, 01 Jun 2024 13:46:01 GMT

There are plenty, see below

Re: Checkpoint can not block Offensive Language content

the_rock — Sat, 01 Jun 2024 14:10:15 GMT

Just logging in now to S1C for one customer, let me see.

Andy

Re: Checkpoint can not block Offensive Language content

the_rock — Sat, 01 Jun 2024 14:18:08 GMT

@_Val_ I dont see inappropriate sites by default, I assume you added it yourself? Other ones are there...

Andy