topic Re: Checkpoint 6400 and SSLVPN port. in Spark Firewall (SMB)

Checkpoint 6400 and SSLVPN port.

kdubrowski — Thu, 11 Aug 2022 10:15:19 GMT

Hi,

I'm preparing SSLVPN setup on Checkpoint 6400. So far I have done in my lab:

1. enabled Mobile Access blade

2. added users in VPN group

3. added policy allowing traffic

It work perfect, but this is lab. In production env port tcp/443 is already used by Customer application and it can't be used by SSLVPN.

Is it possible to change default tcp/443 SSLVPN port? If yest, then how and where? If yes, then how to specify the custom port in Checkpoint Mobile client while preparing new connection?

Any other suggestions are welcome. We are using 80.40.

Thanks!

Best Regards,

Krzysztof

Re: Checkpoint 6400 and SSLVPN port.

Chris_Atkinson — Thu, 11 Aug 2022 15:15:44 GMT

How many public addresses do you have available, only a single IP?

sk101276: Mobile Access port cannot be modified (default 443)

Re: Checkpoint 6400 and SSLVPN port.

the_rock — Thu, 11 Aug 2022 17:03:54 GMT

This is where you change it:

Re: Checkpoint 6400 and SSLVPN port.

Chris_Atkinson — Fri, 12 Aug 2022 02:26:32 GMT

That's for visitor mode in which case you would define the site on the client per sk103107 to match if it were Endpoint Security VPN.