topic Re: Hostname disclosure on port 264 in SASE and Remote Access

Hostname disclosure on port 264

Pedro_Marques — Thu, 28 Jun 2018 16:48:43 GMT

Hi,

Port 264 is open on the gateways for Secureremote is this port realy necessary ?

There is some securety issues about the hostname disclosure as seen in the link bellow

CheckPoint Firewall-1 SecuRemote Topology Service Hostname Disclosure | Rapid7

best regards,

Re: Hostname disclosure on port 264

PhoneBoy — Thu, 28 Jun 2018 17:51:49 GMT

See: Check Point response to SecuRemote Topology Service Hostname Disclosure

TL;DR: The information is considered public.

Re: Hostname disclosure on port 264

Tony_Graham — Thu, 29 Nov 2018 18:38:38 GMT

You can uncheck in Global Properties, 'Accept Remote Access Control Connections' and it will shut down port 264 on the external interface.

There may be reasons you do not want to do that but if you have a small network with little or no remote access the above setting will not cause any issues and you can pass a port scan.

Re: Hostname disclosure on port 264

FW-guy — Thu, 11 Apr 2019 16:49:32 GMT

Thanks! This was helpful and proved to be effective.

Re: Hostname disclosure on port 264

Daniele_DiCaro — Fri, 24 Dec 2021 10:36:57 GMT

Hey Tony,

I was searching for useful information regarding the port 264, because I need to understand which features would be compromised if I shut down that port. And your comment is one of the few interesting.

Can you explain me which reasons were you referring to? And why a network with little remote access won't be compromised?

Thank you in advance!

Re: Hostname disclosure on port 264

_Val_ — Fri, 24 Dec 2021 12:43:10 GMT

@Daniele_DiCaro Instead of reviving a three year old thread, why don't you ask your actual question in a separate post?