topic Re: Client-to-Site Firewalls also vulnerable to CVE-2019-8456? in SASE and Remote Access

Client-to-Site Firewalls also vulnerable to CVE-2019-8456?

Doeschi — Mon, 08 Apr 2019 15:06:40 GMT

Hi all

We don't use the firewalls to terminate Site-to-site VPN, but Client-to-Site VPN connections. Are those gateways also vulnerable?

Regards,
Roger

Re: Client-to-Site Firewalls also vulnerable to CVE-2019-8456?

PhoneBoy — Mon, 08 Apr 2019 19:10:01 GMT

No.
Here's our official SK on the matter: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk149892

Re: Client-to-Site Firewalls also vulnerable to CVE-2019-8456?

Doeschi — Tue, 09 Apr 2019 08:44:26 GMT

Hi Dameon,

thanks for the answer, I've been reading this SK, but the "Description" is very briefly and since the CVE is still closed that's all information we have. So I rather ask than guess, if also Client-to-Site VPN Gateways are affected as well.

Regards
Roger

Re: Client-to-Site Firewalls also vulnerable to CVE-2019-8456?

PhoneBoy — Tue, 09 Apr 2019 17:20:02 GMT

Quite alright to ask.
If Client-to-Site VPN configurations were affected, they would have been explicitly mentioned in the SK.