topic Re: GW to Internet Traffic in General Topics

GW to Internet Traffic

Sh3r — Wed, 05 Jan 2022 10:26:15 GMT

I am currently undergoing a security audit and one of the points which came was why "Any" access from Gateways to internet is allowed via "Accept Outgoing Packets Originating From Gateway" in global properties.

I remember speaking once with an SR attendant that if traffic is enabled from Gateways to "any" its not particularly a security threat as it is required for fetching updates.. can i get a reference article for this ?

Re: GW to Internet Traffic

_Val_ — Wed, 05 Jan 2022 12:57:03 GMT

Look into sk83520, sk94508, and sk106251

Re: GW to Internet Traffic

_Val_ — Wed, 05 Jan 2022 12:58:43 GMT

Also, you may want to read this thread: https://community.checkpoint.com/t5/General-Topics/Updatable-Object-for-Checkpoint-services/m-p/119563#M22237

Re: GW to Internet Traffic

Sh3r — Fri, 07 Jan 2022 16:05:43 GMT

Thank you.. very helpful