endpoint connectivity problem

Wolfgang — Tue, 26 Nov 2024 07:26:50 GMT

We are facing a lot of communication errors for most of our EndPoint clients.

At the central firewall we defined exception with the updatable object "Check Point services" for HTTPS-inspection and ThreatPrevention. Firewall-Log shows the traffic as accepted.

Are there any other destinations to configure as an exception? The connectivitycheck checks also "https://clients2.googleusercontent.com" as an example.

ConnectivityCheck shows following results:

### Testing connectivity to Checkpoint Endpoint Security online services
### Checking network connection. Connected
Testing connection to Threat Emulation cloud................................................. Fail
https://te.checkpoint.com
Testing connection to Threat Emulation cloud 2............................................... Fail
https://threat-emulation.checkpoint.com
Testing connection to Data Collection service................................................ Fail
https://sba-data-collection.iaas.checkpoint.com/upload
Testing connection to Microsoft Store........................................................ Fail
https://edge.microsoft.com
Testing connection to Clients2.googleusercontent.com......................................... Fail
https://clients2.googleusercontent.com
Testing connection to Clients2.google.com.................................................... Fail
https://clients2.google.com
Testing connection to Akamaitechnologies a88................................................. Fail
https://a88-221-154-122.deploy.static.akamaitechnologies.com
Testing connection to Akamaitechnologies a95................................................. Fail
https://a95-100-209-19.deploy.static.akamaitechnologies.com
Testing connection to EU AmazonAWS........................................................... Fail
https://EU-vSEC-ASG-ALB-2115742625.eu-west-1.elb.amazonaws.com
Testing connection to US AmazonAWS........................................................... Fail
https://US-vSEC-ASG-ALB-448998794.us-east-1.elb.amazonaws.com
Testing connection to Endpoint-management AmazonAWS.......................................... Fail
https://endpoint-management-prd-alb-1052683977.ap-southeast-2.elb.amazonaws.com
Testing connection to Endpoint-managment Platform............................................ Fail
https://s3-fips-r-w.us-east-1.amazonaws.com
Testing connection to E2 Signatures.......................................................... Fail
https://teadv.checkpoint.com
Testing connection to Googleapis EU.......................................................... Fail
https://storage.googleapis.com/datatube-data-eu
Testing connection to Googleapis US.......................................................... Fail
https://storage.googleapis.com/datatube-data-us
Testing connection to Googleapis UK.......................................................... Fail
https://storage.googleapis.com/datatube-data-uk
Testing connection to Cloudfunctions.net..................................................... Fail
https://europe-west1-datatube-240519.cloudfunctions.net
Testing connection to datatubeprodwesteurope.blob.core.windows.net........................... Fail
https://datatubeprodwesteurope.blob.core.windows.net
Testing connection to Datatube-prod.azurewebsites.net........................................ Fail
https://datatube-prod.azurewebsites.net
Testing connection to Cloudfunctions.net..................................................... Fail
https://us-east4-chkp-gcp-rnd-threat-hunt-box.cloudfunctions.net/prod-gcp-contractprovider
Testing connection to Cloudinfra-gw.portal.checkpoint.com.................................... Fail
https://cloudinfra-gw.portal.checkpoint.com
Testing connection to Cloudinfra-gw-us.portal.checkpoint.com................................. Fail
https://cloudinfra-gw-us.portal.checkpoint.com
Testing connection to Cloudinfra-gw.ap.portal.checkpoint.com................................. Fail
https://cloudinfra-gw.ap.portal.checkpoint.com
Testing connection to Live protection........................................................ OK
Press any key to exit...

Re: endpoint connectivity problem

PhoneBoy — Tue, 26 Nov 2024 19:12:10 GMT

The URLs needed are listed here: https://support.checkpoint.com/results/sk/sk116590

Re: endpoint connectivity problem

Wolfgang — Tue, 26 Nov 2024 20:32:17 GMT

Great, thanks Dameon. That‘s the sk I never found. Are these mentioned URLs and IPs from the sk116590 included in the updatable object „Check Point Services“ ?

Re: endpoint connectivity problem

PhoneBoy — Tue, 26 Nov 2024 21:35:07 GMT

The ones with a Check Point domain are, the others are not.
Having said that, I agree there should be an updatable object for this.

topic endpoint connectivity problem in Endpoint

endpoint connectivity problem

Re: endpoint connectivity problem

Re: endpoint connectivity problem

Re: endpoint connectivity problem