topic Can checkpoint Inspection Settings exceptions select only one wall? in General Topics

Can checkpoint Inspection Settings exceptions select only one wall?

Wang — Fri, 19 Jun 2020 12:45:18 GMT

Dear Engineer

Can checkpoint Inspection Settings exceptions select only one wall?

Re: Can checkpoint Inspection Settings exceptions select only one wall?

Timothy_Hall — Fri, 19 Jun 2020 16:21:46 GMT

Selecting more than one gateway here (other than "Any" which means all gateways) is not allowed. To make this possible a nonexistent object type called "Gateway Group" would be needed; a usual network object group can't be selected here even if it only contains gateway/cluster objects. There is nothing stopping you from creating multiple identical exceptions and applying each of them to a separate single gateway/cluster however.

Also be aware of the following notes concerning Inspection Settings exceptions quoted from my IPS Immersion course:

◦ Inspection Settings Exceptions are specified separately from Threat Prevention Exceptions, so the main Threat Prevention
Global exceptions DO NOT apply.
◦ One, some, or all Inspection Settings signatures can be specified in a single Inspection Setting Exception rule for an R80.10
gateway. For an R77.30 gateway, Inspection Settings Exceptions must be specified in the IPS layer under Threat Prevention.
◦ Each gateway has exactly one Inspection Settings Profile assigned to it.

Re: Can checkpoint Inspection Settings exceptions select only one wall?

Wang — Wed, 24 Jun 2020 07:46:21 GMT

In the Install on installation option, I did not find the gateway object to install.Have you ever had this problem? I need your help

Re: Can checkpoint Inspection Settings exceptions select only one wall?

G_W_Albrecht — Wed, 24 Jun 2020 12:50:15 GMT

I would suggest to contact TAC with this issue !