topic Re: Sending a URL to Check Point Firewall for Inspection in General Topics

Sending a URL to Check Point Firewall for Inspection

Di_Junior — Fri, 28 Feb 2020 15:04:33 GMT

Dear Mates

We ae constantly getting SMS with malicious links, and we would like to know if it is possible to have the SMS center send the URL to Check Point Firewall to inspect if the URL is malicious or not, anf then firewall send the veridict back to the SMS center.

Thanks in advance

Re: Sending a URL to Check Point Firewall for Inspection

Danny — Fri, 28 Feb 2020 15:20:30 GMT

Please elaborate further. CP version? Screen shots? Licensed blades?

https://threatpoint.checkpoint.com/ThreatPortal/emulation

https://www.checkpoint.com/urlcat/main.htm

Re: Sending a URL to Check Point Firewall for Inspection

Di_Junior — Fri, 28 Feb 2020 15:27:34 GMT

Hi Danny

what have a machine that delivers SMSs to our clientes, what we would like to achieve is the following:
- when a SMS arrives to the sms machine, the sms machines sends the URL to check point firewall
- Check point firewall inspects the URL and sends the veridict back to the sms machine

Is this achievable? we are using Check Point Firewalls (80.20)

Re: Sending a URL to Check Point Firewall for Inspection

Danny — Fri, 28 Feb 2020 15:36:33 GMT

Ah, SMS typically means Check Point Security Management Server or SmartCenter Server, what you mean is Short Message Service, right?

Re: Sending a URL to Check Point Firewall for Inspection

Benedikt_Weissl — Fri, 28 Feb 2020 15:31:10 GMT

There is Thread Prevention Cloud API which supports Anti-Virus, Threat Emulation and Threat Extraction:

https://sc1.checkpoint.com/documents/TPAPI/CP_1.0_ThreatPreventionAPI_APIRefGuide/html_frameset.htm

Re: Sending a URL to Check Point Firewall for Inspection

Di_Junior — Fri, 28 Feb 2020 15:31:55 GMT

HI Danny

Sorry about the confusion. Yes I mean Short Message Service.

Re: Sending a URL to Check Point Firewall for Inspection

PhoneBoy — Fri, 28 Feb 2020 16:05:20 GMT

The link you provided is only relevant for emulating specific files. For reputation information, we are working on an API. You can see a project related to it here: https://github.com/CheckPointSW/reputation-service-api

The service is in EA and will be a paid offering. If you're interested let us know. @Yoav_Lasman