topic Re: Checkpoint Policy in General Topics

Checkpoint Policy

handiansudianto — Fri, 03 Feb 2023 02:20:03 GMT

Hello..

For checkpoint network and application policy ist should be paired, example i want to allow traffic from LAN to Azure Site2Site so should i make like attached picture?

Re: Checkpoint Policy

the_rock — Fri, 03 Feb 2023 02:35:58 GMT

If its traffic via s2s vpn, then forst picture example is good enough. What is the 2nd one for? (CP2)

Re: Checkpoint Policy

handiansudianto — Fri, 03 Feb 2023 02:50:25 GMT

2nd pc is policy for application, should be paired also?

Re: Checkpoint Policy

the_rock — Fri, 03 Feb 2023 02:57:34 GMT

Ok, if its totally seperate rule for app control, then yes. But if you wanted to add 2nd rule for s2s vpn tunnel, you dont need it, just 1st rule is good.

Re: Checkpoint Policy

handiansudianto — Fri, 03 Feb 2023 03:37:12 GMT

hello, so for Network Policy i can remove 2nd rule and for Application policy both rule is used, am i right?

Re: Checkpoint Policy

the_rock — Fri, 03 Feb 2023 04:44:17 GMT

For vpn, rule 1 is fine in network layer. If you have another ordered layer with urlf+appc blades enabled, then rule 2 would belong in that layer.