topic Re: Implied rule allowing external https traffic which need to block in Firewall and Security Management

Implied rule allowing external https traffic which need to block

ramadhas — Tue, 01 Oct 2024 13:08:07 GMT

Noticed internet resources are accessing our firewall external interface ip with port 443. These traffics are allowed through implied rule and looking for fix. These gateways are running old gaia version 77.20.

Unable to find solution on the checkmates, due to this old gaia version and TAC case also not possible.

Looking for urgent solution

Re: Implied rule allowing external https traffic which need to block

PhoneBoy — Tue, 01 Oct 2024 15:26:24 GMT

You'll probably need to do something like this to change the implied rules: https://community.checkpoint.com/t5/Security-Gateways/How-to-disable-Gaia-access-from-the-Internet/m-p/89654/highlight/true#M6863
Note that the file you will need to edit will be in the relevant backward compatibility directory on your management rather than $FWDIR/lib.

Or you can create an fw samp rule to block the necessary traffic: https://support.checkpoint.com/results/sk/sk164472

Re: Implied rule allowing external https traffic which need to block

ramadhas — Tue, 01 Oct 2024 15:58:12 GMT

thank you for the swift response, let me perform above task and update you asap.