https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237166#M46028 <P>Very true mate! Btw, it is possible to do on default service, just override the settings and option is there, but I agree, always better to create custom one in case like this.</P> <P>Andy</P> Mon, 30 Dec 2024 13:39:32 GMT the_rock 2024-12-30T13:39:32Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237112#M46020 <P>hi&nbsp;</P> <P>&nbsp;</P> <P>How do I do this in Checkpoint? Is it possible to associate port 443 only with the HTTPS protocol or not allow the SSH protocol on port 443?</P> Sun, 29 Dec 2024 14:23:27 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237112#M46020 lluner 2024-12-29T14:23:27Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237114#M46022 <P><SPAN>Please review P</SPAN><SPAN>rotocol signatures option &amp; HTTPS inspection for this requirement.</SPAN></P> <P>iirc there was also an IPS protection for SSH over non-standard ports as an alternative but please double-check the performance implications of this approach.</P> Sun, 29 Dec 2024 15:51:07 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237114#M46022 Chris_Atkinson 2024-12-29T15:51:07Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237118#M46023 <P>Hi,</P> <P>Create a custom service object, and set it as&nbsp;<a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/3630">@Chris_Atkinson</a>&nbsp; said.</P> <P>You can choose the protocol (1st screenshot)</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2024-12-29 18_28_48-Cloud Demo Server [ID_784674684]-R81.20-SmartConsole.png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/29039i14DC1615D33FC719/image-size/medium?v=v2&amp;px=400" role="button" title="2024-12-29 18_28_48-Cloud Demo Server [ID_784674684]-R81.20-SmartConsole.png" alt="2024-12-29 18_28_48-Cloud Demo Server [ID_784674684]-R81.20-SmartConsole.png" /></span></P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2024-12-29 18_29_05-Cloud Demo Server [ID_784674684]-R81.20-SmartConsole.png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/29040iED3CA26A56F034D1/image-size/medium?v=v2&amp;px=400" role="button" title="2024-12-29 18_29_05-Cloud Demo Server [ID_784674684]-R81.20-SmartConsole.png" alt="2024-12-29 18_29_05-Cloud Demo Server [ID_784674684]-R81.20-SmartConsole.png" /></span></P> <P>Akos</P> Sun, 29 Dec 2024 17:32:37 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237118#M46023 AkosBakos 2024-12-29T17:32:37Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237135#M46025 <P>I cant recall what default settings are now, but what guys said makes total sense, just create new one and enable those options.</P> <P>Andy</P> Mon, 30 Dec 2024 00:23:03 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237135#M46025 the_rock 2024-12-30T00:23:03Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237154#M46027 <P>By the "offical' https service object, those settings are grayed out. Thats why I created a screenshot of a total new object.</P> <P>And don't forget, if you make a change on a service object, it will affecten on every rule, where the object in in use. So be careful <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> <P>Akos</P> Mon, 30 Dec 2024 10:26:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237154#M46027 AkosBakos 2024-12-30T10:26:17Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237166#M46028 <P>Very true mate! Btw, it is possible to do on default service, just override the settings and option is there, but I agree, always better to create custom one in case like this.</P> <P>Andy</P> Mon, 30 Dec 2024 13:39:32 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237166#M46028 the_rock 2024-12-30T13:39:32Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237173#M46029 <P>Exactly. A long long ago, I changed one default service object parameters... It wasn't the best deceison. <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> <P>...live and learn...</P> <P>Akos</P> Mon, 30 Dec 2024 14:04:45 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237173#M46029 AkosBakos 2024-12-30T14:04:45Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237176#M46030 <P>I think I know the reason mate...back then, you forgot to eat enough cabbage <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> <P>Andy</P> Mon, 30 Dec 2024 14:07:39 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-inspection-https-and-http/m-p/237176#M46030 the_rock 2024-12-30T14:07:39Z