topic Change WebUI Port with CLI in Firewall and Security Management

Change WebUI Port with CLI

Jason_Hamilton — Wed, 13 Mar 2019 13:32:13 GMT

Hello,

I just installed a new CheckPoint 1450 at a remote location. The firewall rules are functioning and live. Back at my office, I am able to SSH into the firewall just fine, but I am unable to get to the WEBUI for management. I manage it on a public IP address and configured the firewall's Administrative Access allowing my Public IP. I also configured it for port 4434, which I believe I need to change it to 443 in order to gain access.

I looked through documentation and they provided:

webui enable <port_number>

and

CLISH> set web ssl-port <port number>

I am not sure this applies. I just ssh into the firewall and attempted to run these with expert mode, but it does not seem like these commands exist.

Re: Change WebUI Port with CLI

Maarten_Sjouw — Wed, 13 Mar 2019 15:36:44 GMT

Neither apply. You should use a port away from 443 and add it to your URL.

Embedded GAIA uses the following commands:

combined command to start with anything allowed

set admin-access interfaces any access allow allowed-ipv4-addresses any web-access-port 4434

separate commands:

set admin-access interfaces any

set admin-access access allow

to allow any address access (together with the above Interface command) you can use:

set admin-access allowed-ipv4-addresses any

or you can limit it to ranges and or single IP's:

add admin-access-ipv4-address network-ipv4-address 2.9.8.0 mask-length 24
add admin-access-ipv4-address single-ipv4-address 2.8.7.10
set admin-access allowed-ipv4-addresses from-ip-list

to set the web ssl port:

set admin-access web-access-port 4434

Re: Change WebUI Port with CLI

Jason_Hamilton — Wed, 13 Mar 2019 17:20:11 GMT

Awesome, thanks for the assistance!

Is there a command to commit the changes or should it go through right away?

Re: Change WebUI Port with CLI

PhoneBoy — Wed, 13 Mar 2019 17:29:23 GMT

I believe the change happens right away, but you need to do a "save config" so it persists across reboots.

Re: Change WebUI Port with CLI

Maarten_Sjouw — Wed, 13 Mar 2019 22:29:55 GMT

No need for save config, does not even know the command.
In embedded all changes are instant and saved.