topic Re: Close port 80 in SASE and Remote Access

Close port 80

Polina_1 — Fri, 28 Mar 2025 09:24:49 GMT

Hello
Could you please advise me how to close port 80 on a cluster only on external interfaces? Now we see that the cluster is accessible from the Internet on port 80. In the logs this connection passes through implied rules.
I found https://support.checkpoint.com/results/sk/sk165937. Do I understand correctly that these recommendations only close ports on external interfaces?

We are using Remote Access VPN and S2S VPN. If we close port 80, will it affect the VPN work?

Please answer these questions.
Thank you in advance.

Re: Close port 80

AkosBakos — Fri, 28 Mar 2025 12:24:11 GMT

Hi @Polina_1

I think you can safely disable tcp/80. Otherwise security over all, if I were you I would close the tcp/80 port.

Check this communication matrix:

source: https://support.checkpoint.com/results/sk/sk52421

Akos

Re: Close port 80

the_rock — Fri, 28 Mar 2025 12:34:44 GMT

RA vpn relies on https. Btw, cant open the sk you referenced.

Andy

Re: Close port 80

AkosBakos — Fri, 28 Mar 2025 12:37:22 GMT

Any, delete the dot by the end of the line 🙂

Re: Close port 80

the_rock — Fri, 28 Mar 2025 12:40:15 GMT

@AkosBakos DOH...Homer Simpson moment, haha, tx bud. @Polina_1 Yes, I believe that applies to external interfaces.

Andy

Re: Close port 80

Polina_1 — Fri, 28 Mar 2025 13:07:39 GMT

I checked sk52421. Really, tcp 80 is not used anywhere.

I think I will make the recommendations from sk165937 to close port 80.

Thanks!

Re: Close port 80

the_rock — Fri, 28 Mar 2025 13:39:36 GMT

I would say thats your best bet.

Andy

Re: Close port 80

CheckPointerXL — Wed, 02 Apr 2025 21:59:17 GMT

Create nat rule to a fake ip address