topic Re: HSTS and HTTP headers on 77.30 Mobile Access in SASE and Remote Access

HSTS and HTTP headers on 77.30 Mobile Access

DmitriyDubovik — Thu, 22 Jun 2023 12:54:41 GMT

Good afternoon.

Is there any way to enable HSTS on GW version 77.30 to connect to public address via mobile access with SSL VPN enabled?

https://support.checkpoint.com/results/sk/sk121795 According to this SK, this can only be done from version 80.20.

Additionally, can we setting the next HTTP headers: 1. X-XSS-Protection 2. X-Content-Type-Options: nosniff

Re: HSTS and HTTP headers on 77.30 Mobile Access

Chris_Atkinson — Thu, 22 Jun 2023 12:05:44 GMT

Please consider upgrading to a supported release, R77.30 & R80.20 are end of life.

Re: HSTS and HTTP headers on 77.30 Mobile Access

DmitriyDubovik — Thu, 22 Jun 2023 12:12:27 GMT

Not possible for some reason at this time

Re: HSTS and HTTP headers on 77.30 Mobile Access

DmitriyDubovik — Mon, 26 Jun 2023 14:15:28 GMT

Okay, i got it wrong.

It can be made on 77.30.

SK: https://support.checkpoint.com/results/sk/sk121795

Re: HSTS and HTTP headers on 77.30 Mobile Access

G_W_Albrecht — Thu, 22 Jun 2023 14:31:39 GMT

Then there is no way to enable HSTS and your installation is unsupported and insecure - as there are no Updates possible for Threat Prevention, IPS, AV, ABOT...