topic Re: Implied Rules SMB in Spark Firewall (SMB)

Implied Rules SMB

pfilipe — Tue, 16 Aug 2022 08:37:10 GMT

Hello,

Can somebody help me understand this? Why is this blocked in implied rule and how can i edit implied rules in SMB?

Best regards,

Re: Implied Rules SMB

Chris_Atkinson — Tue, 16 Aug 2022 09:41:10 GMT

What version is the Gateway installed with....

Please review sk167236 and see if it applies to your situation?

Re: Implied Rules SMB

pfilipe — Tue, 16 Aug 2022 09:48:50 GMT

Hello the version is R77.30, in that SK the policy configured is in strict mode ours is in Standard and we already created specific rules for that traffic.

Re: Implied Rules SMB

Chris_Atkinson — Tue, 16 Aug 2022 10:17:20 GMT

To clarify R77.20.87 on a 1400?

Re: Implied Rules SMB

Gero_Stolle — Tue, 16 Aug 2022 10:29:29 GMT

.. could you please share the routing table ?
by
show route
in clish

and a
fw ver
please

thx
Gero

Re: Implied Rules SMB

pfilipe — Tue, 16 Aug 2022 11:18:36 GMT

Yes it is.

Best regards,

Re: Implied Rules SMB

pfilipe — Tue, 16 Aug 2022 11:34:44 GMT

Yes,

This is coming over a ipsec tunnel:

fw1-MX> show route
Codes: C - Connected, S - Static, R - RIP, B - BGP (D - Default),
O - OSPF IntraArea (IA - InterArea, E - External, N - NSSA)
A - Aggregate, K - Kernel Remnant, H - Hidden, P - Suppressed,
U - Unreachable, i - Inactive

C 127.0.0.0/8 is directly connected, lo
lo
C 192.168.27.0/24 is directly connected, LAN1
LAN1
fw1-MX>
fw1-MX> fw ver
This is Check Point's 1450 Appliance R77.20.87 - Build 929
fw1-MX>

This is the Enc Domain:

best regards.

Re: Implied Rules SMB

Chris_Atkinson — Tue, 16 Aug 2022 11:44:10 GMT

For awareness more recent builds than 929 are available here: sk153433.

Re: Implied Rules SMB

pfilipe — Mon, 19 Sep 2022 14:59:50 GMT

Hello Chris,

We installed the latest Build but still have the same problem. Any more ideas?

Re: Implied Rules SMB

Chris_Atkinson — Tue, 20 Sep 2022 13:33:01 GMT

If the issue persists please contact TAC for assistance.

Re: Implied Rules SMB

pfilipe — Wed, 21 Sep 2022 14:22:52 GMT

Hello,

The solution is on this sk:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101666&partition=Basic&product=Quantum