topic Re: Blocking Cloud Providers Private Tunnel in General Topics

Blocking Cloud Providers Private Tunnel

gemechis — Thu, 06 Feb 2025 05:22:30 GMT

Recently, we have seen an issue where some device having an internet connectivity estbalished a tunnel with cloudflare and do access internal systems which are private and only accessed through LAN network. And he did access the system from public through cloudflare tunnel.

Is there any checkpoint could identify this things? As we have checkpoint on the perimeter. And we are worried that there also other cloud providers who could offer this kind of future.

Re: Blocking Cloud Providers Private Tunnel

PhoneBoy — Thu, 06 Feb 2025 15:08:00 GMT

To potentially detect this sort of thing, you’d need App Control and possibly HTTPS Inspection configured.
Not sure what Cloudflare service does what you describe.

Re: Blocking Cloud Providers Private Tunnel

gemechis — Fri, 28 Feb 2025 08:51:46 GMT

@PhoneBoy

How much resource does enabling HTTPS Inspection consumes. Conder we have a maestro deployment with 7000 series security gateways.

Re: Blocking Cloud Providers Private Tunnel

PhoneBoy — Fri, 28 Feb 2025 17:05:24 GMT

It depends on a number of factors, but you can expect that it will cut the overall throughput in half.
You can get an idea of the impact by reviewing the data sheet for the 9800 (the successor to the 7000): https://www.checkpoint.com/downloads/products/quantum-force-9800-datasheet.pdf