topic Re: R82 Gateway - Public Interface - Extender.html in Firewall and Security Management

R82 Gateway - Public Interface - Extender.html

CaseyB — Fri, 22 Aug 2025 19:21:43 GMT

Running SMS / GW on R82 JHF-36.

A recent external scan is listing this URL: https://<public_ip>/extender.html as reachable. My search queries have not turned up a whole lot on this one. Visting the URL at least gets us this error:

The URL you requested could not be found on this server.

We do not have the Mobile Access blade enabled, it was at one time, but we disabled it in R81.10 or R81.20, and of course SNX is also not enabled. I do not re-call this showing up in previous scans, but it very well could have and was not reported.

This is what we have for allowed clients:

The saml-vpn portal is not used, but maybe related to this?

Re: R82 Gateway - Public Interface - Extender.html

the_rock — Fri, 22 Aug 2025 19:27:51 GMT

Never seen that before myself. I would definitely verify with TAC, though doing a quick search online, seems to be related to that option checked for check point mobile for windows.

Andy

Re: R82 Gateway - Public Interface - Extender.html

PhoneBoy — Fri, 22 Aug 2025 22:34:42 GMT

This is probably the legacy SNX portal, which is used only when MAB is disabled and SNX is enabled.
Note that SNX stands for Secure Network eXtender lending to the idea 🙂

I found an old SK that suggests you might be able to disable it as follows:

Go to IPsec VPN - go to "VPN clients" - clear the box "SSL Network Extender".
Go to IPsec VPN - Clientless VPN - clear the box "Support Clientless VPN".
Go to "Policy" menu - click on "Install Database..." - select all Security Management Servers / CMAs / Domains / CLMs / Domain Log Servers.
Install Access Policy on relevant gateways

If that doesn't fix it, suggest a TAC case.

Re: R82 Gateway - Public Interface - Extender.html

the_rock — Fri, 22 Aug 2025 23:32:41 GMT

Good ol' snx...brings back memories...lol

Re: R82 Gateway - Public Interface - Extender.html

CaseyB — Mon, 25 Aug 2025 13:09:38 GMT

None of those options are currently checked, so for fun I re-enabled them, installed DB / policy and the SSL Network Extender login page showed up. I re-disabled them and we are back at the original problem.

I will open a TAC case.

Re: R82 Gateway - Public Interface - Extender.html

the_rock — Mon, 25 Aug 2025 13:21:35 GMT

I wonder if there might be a file that needs to be modified...anyway, let us know how it gets solved.

Andy