topic Zero Phising Implementation in Firewall & Security Management

Zero Phising Implementation

Rabin — Mon, 23 Sep 2024 05:29:10 GMT

Hi Checkmates,

I am was implementing the zero phising features in R81.20 but while enabling zero phising i came to that we have to give fqdn of gateway and enable https inspection. My question is, Does that mean we need to give FQDN that was used to create outbound certificate and also noticed that it should resolve in DNS A record. so which IP address should i use in DNS record to fully implement it.

I hope you got my queries.

Thank You.

Re: Zero Phising Implementation

_Val_ — Mon, 23 Sep 2024 06:56:59 GMT

Did you take a loon into the relevant chapter of the admin guide yet? I believe it answers your question.

Re: Zero Phising Implementation

Rabin — Mon, 23 Sep 2024 10:47:27 GMT

Hi @_Val_

Can you please provide insight on why FQDN is mandatory for this feature. ?

Thank You.

Rabindra

Re: Zero Phising Implementation

_Val_ — Mon, 23 Sep 2024 11:32:28 GMT

Did you read the guide yet?

Re: Zero Phising Implementation

Rabin — Mon, 23 Sep 2024 12:07:35 GMT

Hi @_Val_

Yes, i have gone through the guide and everything mentioned steps there.

Thanks

Re: Zero Phising Implementation

Chris_Atkinson — Mon, 23 Sep 2024 12:26:59 GMT

Some historical discussion may help with your understanding:

https://community.checkpoint.com/t5/Threat-Prevention/Zero-Phishing-will-it-work-without-FQDN-configured-on-SecGW/td-p/163546

Re: Zero Phising Implementation

_Val_ — Mon, 23 Sep 2024 13:50:12 GMT

Okay. Other than that FQDN is needed to validate the GW HTTPSi cert, you also need it, so either client or server could resolve the GW Zero Phishing URL properly