Need Capsule Connect, but close unnecessary ports?

Lockout888 — Mon, 11 Jan 2021 17:36:51 GMT

Hi, running R80.40 and need to use an iPhone for VPN access.

I configured the IPSec VPN and Mobile Access blades, Capsule Connect option only etc.

Capsule Connect seems to be working correctly, and can access resources.

Now I am receiving Implied Rule "Accept" connections and IPS Prevent logs on the WAN.

GRC Shields Up scan shows ports 80 & 443 are open to the Internet, and 444 and 500 are as closed. All other ports are stealth.

I would rather close (preferably stealth) any ports that are not needed for Capsule Connect.

How can I accomplish this?

Re: Need Capsule Connect, but close unnecessary ports?

PhoneBoy — Mon, 11 Jan 2021 18:11:40 GMT

See the following SK:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165937&partition=Advanced&product=Security
It may have other implications, including break Visitor Mode for Remote Access VPN and not allow other people to add your site to their VPN client.