topic Re: Check Point allows HTTP/HTTPS without rule in Firewall and Security Management

Check Point allows HTTP/HTTPS without rule

vanhieuptit4 — Tue, 01 Jul 2025 07:05:12 GMT

I'm using Check Point R82. I’ve configured NAT for ports 80 and 443 from the internet to a backend server. However, I noticed that HTTP/HTTPS traffic is reaching the backend even though no explicit policy rule has been created to allow it.

I suspect some Implied Rule might be allowing this by default.

I tried disabling some implied rule options but it didn’t work — is there any official or correct way to do this in R82?

Thanks in advance!

Re: Check Point allows HTTP/HTTPS without rule

Lesley — Tue, 01 Jul 2025 07:12:22 GMT

Do you see this traffic in the traffic logs and if so can you paste it here?

Re: Check Point allows HTTP/HTTPS without rule

vanhieuptit4 — Tue, 01 Jul 2025 12:07:40 GMT

this is log of firewall

Re: Check Point allows HTTP/HTTPS without rule

Chris_Atkinson — Tue, 01 Jul 2025 12:19:03 GMT

Have you already reviewed sk105740, sk180808 ?

Re: Check Point allows HTTP/HTTPS without rule

Lesley — Tue, 01 Jul 2025 20:09:12 GMT

Your NAT rule does not work because rule 0 goes before any other custom made rules.

I assume you use external VIP IP of the firewall. If you use any other IP you have same issue? If you really want to use VIP IP you can follow this sk https://support.checkpoint.com/results/sk/sk178087