topic Re: One interface active cause ssh/https connectivity? in General Topics

One interface active cause ssh/https connectivity?

antsvett3 — Thu, 04 Dec 2025 14:27:10 GMT

Hi All,

I'm trying to set up a lab but I only have my laptop connected to my check point appliance. When i have policy installed permitting my laptop to the firewall on ssh/https I can not connect. I'm wondering if this is because I only have the Mgmt interface up. When looking at the logs the connection is bypassing the accept and going to the clean up rule. Unload the policy and no issues. I'm Running R81.10 jumbo take 181.

Any insight is appreciated.

Thanks,

Anthony

Re: One interface active cause ssh/https connectivity?

Chris_Atkinson — Thu, 04 Dec 2025 14:51:04 GMT

How have you defined the object / rules and what does the topology of the gateway object otherwise look like?

Re: One interface active cause ssh/https connectivity?

antsvett3 — Thu, 04 Dec 2025 15:13:31 GMT

Hi,

I forgot to mention this is a standalone environment.

I've attached some screenshots. I don't see any issue.

Re: One interface active cause ssh/https connectivity?

Chris_Atkinson — Thu, 04 Dec 2025 15:28:15 GMT

Kindly share the properties of the host object "H-192.168.1.2" ?

Re: One interface active cause ssh/https connectivity?

the_rock — Thu, 04 Dec 2025 15:32:39 GMT

2 things could my eye. Shows failing on rule 3, but clean up rule is 3. Do you have another ordered layer because if yes, it needs to be allowed on it. Also, what does fw stat show?

See example from my lab:

Re: One interface active cause ssh/https connectivity?

antsvett3 — Thu, 04 Dec 2025 15:39:27 GMT

sorry, thats because i just deleted a rule after i tried to create an interface without having a connection to it. Prior to that it said dropped by rule 2.

[Expert@inet-fw:0]# fw stat
HOST POLICY DATE
localhost test-ssh 4Dec2025 10:38:42 : [>Mgmt] [<Mgmt]

Re: One interface active cause ssh/https connectivity?

the_rock — Thu, 04 Dec 2025 15:35:49 GMT

What time zone are you in? If you want, we can do quick remote in a bit on my break and Im sure we can figure it out.

Re: One interface active cause ssh/https connectivity?

antsvett3 — Thu, 04 Dec 2025 15:37:38 GMT

pls see attached

Re: One interface active cause ssh/https connectivity?

Chris_Atkinson — Thu, 04 Dec 2025 15:40:03 GMT

The IP has a typo 182 rather than 192.

Re: One interface active cause ssh/https connectivity?

the_rock — Thu, 04 Dec 2025 15:41:17 GMT

Good catch Chris, thats gotta be it.

Re: One interface active cause ssh/https connectivity?

antsvett3 — Thu, 04 Dec 2025 15:41:52 GMT

OMG you're right. I'm so sorry. I appreciate the eyes.

Re: One interface active cause ssh/https connectivity?

antsvett3 — Thu, 04 Dec 2025 15:42:37 GMT

Thanks Andy. Looks like I had a typo in the IP and its working now. Appreciate all the feedback.

Re: One interface active cause ssh/https connectivity?

the_rock — Thu, 04 Dec 2025 15:43:20 GMT

It happens, no worries.