topic Re: how to set an X-Frame-Options response header to avoid clickjacking vulnerability, on Checkpoint R77.30 in General Topics https://community.checkpoint.com/t5/General-Topics/how-to-set-an-X-Frame-Options-response-header-to-avoid/m-p/4315#M364 <HTML><HEAD></HEAD><BODY><P>Best practice is to have a stealth rule blocking all traffic to the firewall, even from internal networks.</P><P>The fact this port is showing up at all suggests you either don't have this rule, it is misconfigured, or you are using Client Authentication, which is a legacy feature.</P><P></P><P>Unless you are using Client Authentication, there's no reason this port should be accessed at all.</P><P>If you are using Client Authentication,&nbsp;I strongly encourage you to move to Identity Awareness.</P></BODY></HTML> Mon, 24 Jul 2017 12:56:21 GMT PhoneBoy 2017-07-24T12:56:21Z how to set an X-Frame-Options response header to avoid clickjacking vulnerability, on Checkpoint R77.30 https://community.checkpoint.com/t5/General-Topics/how-to-set-an-X-Frame-Options-response-header-to-avoid/m-p/4314#M363 <HTML><HEAD></HEAD><BODY><P>900/tcp port is open in Checkpoint R77.30 which is running <STRONG>omginitialrefs?</STRONG> service. This makes it vulnerable to clickjacking. Kindly help me with this.</P></BODY></HTML> Mon, 24 Jul 2017 10:18:19 GMT https://community.checkpoint.com/t5/General-Topics/how-to-set-an-X-Frame-Options-response-header-to-avoid/m-p/4314#M363 nivesh_singh 2017-07-24T10:18:19Z Re: how to set an X-Frame-Options response header to avoid clickjacking vulnerability, on Checkpoint R77.30 https://community.checkpoint.com/t5/General-Topics/how-to-set-an-X-Frame-Options-response-header-to-avoid/m-p/4315#M364 <HTML><HEAD></HEAD><BODY><P>Best practice is to have a stealth rule blocking all traffic to the firewall, even from internal networks.</P><P>The fact this port is showing up at all suggests you either don't have this rule, it is misconfigured, or you are using Client Authentication, which is a legacy feature.</P><P></P><P>Unless you are using Client Authentication, there's no reason this port should be accessed at all.</P><P>If you are using Client Authentication,&nbsp;I strongly encourage you to move to Identity Awareness.</P></BODY></HTML> Mon, 24 Jul 2017 12:56:21 GMT https://community.checkpoint.com/t5/General-Topics/how-to-set-an-X-Frame-Options-response-header-to-avoid/m-p/4315#M364 PhoneBoy 2017-07-24T12:56:21Z