https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173317#M69207 <H4><FONT size="3"><SPAN class="mw-headline">Socksifiers - like </SPAN>tun2socks or Win2Socks. But beware: Due to lack of request and packets exchange encryption SOCKS is vulnerable to man-in-the-middle attacks and IP addresses eavesdropping which in consequence clears a way to censorship by governments.</FONT>&nbsp;</H4> Thu, 02 Mar 2023 09:47:43 GMT G_W_Albrecht 2023-03-02T09:47:43Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173312#M69204 <P>Hello all,</P><P>Are you aware of any way to forward SmartConsole traffic through SOCKS proxy? I noticed there's UseDefaultWebProxy option in SmartConsole.exe.config file, but it's not what I'm looking for.</P><P>Thank you!</P> Thu, 02 Mar 2023 08:58:32 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173312#M69204 mk1 2023-03-02T08:58:32Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173314#M69205 <P>If you can find a transparent client this should be possible - SmartConsole will know nothing of the proxy. CP EPSS uses CPTNL server SOCKS proxy on Endpoint Policy Server, though...</P> Thu, 02 Mar 2023 09:29:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173314#M69205 G_W_Albrecht 2023-03-02T09:29:09Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173315#M69206 <P>Thank you for your reply, but I didn't get the point. What do you mean with "transparent client"?</P> Thu, 02 Mar 2023 09:32:36 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173315#M69206 mk1 2023-03-02T09:32:36Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173317#M69207 <H4><FONT size="3"><SPAN class="mw-headline">Socksifiers - like </SPAN>tun2socks or Win2Socks. But beware: Due to lack of request and packets exchange encryption SOCKS is vulnerable to man-in-the-middle attacks and IP addresses eavesdropping which in consequence clears a way to censorship by governments.</FONT>&nbsp;</H4> Thu, 02 Mar 2023 09:47:43 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173317#M69207 G_W_Albrecht 2023-03-02T09:47:43Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173319#M69208 <P>win2socks seems fine, unfortunately 3rd pary software is not an option in my case. It's strange why Check Point didn't add SOCKS as a feature on their client.</P> Thu, 02 Mar 2023 09:54:35 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173319#M69208 mk1 2023-03-02T09:54:35Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173337#M69209 <H4 id="toc-hId-1229481930"><FONT size="3">Due to lack of request and packets exchange encryption SOCKS is vulnerable to man-in-the-middle attacks and IP addresses eavesdropping</FONT></H4> Thu, 02 Mar 2023 11:08:33 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173337#M69209 G_W_Albrecht 2023-03-02T11:08:33Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173340#M69210 <P>I'm not sure for what kind of setup your constraints are, but I believe I should be fine if I forward my traffic through a SSH tunnel.</P> Thu, 02 Mar 2023 11:19:08 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173340#M69210 mk1 2023-03-02T11:19:08Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173413#M69211 <P>I know from experience that you can forward SmartConsole through SSH tunneling using the following TCP ports: 443, 18190, 19009.<BR />SOCKS, however, is not supported, nor is such support planned.<BR />Web SmartConsole (<A href="https://mgmt-ip/smartconsole" target="_blank">https://mgmt-ip/smartconsole</A>), available from R81, can be used through a web proxy.</P> Thu, 02 Mar 2023 20:18:24 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartConsole-through-SOCKS-proxy/m-p/173413#M69211 PhoneBoy 2023-03-02T20:18:24Z