Limit remote access connections from specific public IP

tony1 — Tue, 04 Oct 2022 15:12:07 GMT

Hello,

I would like to ask for advice. Is there a way to limit remote access connections just from specific public IP on locally managed 1590? It seems like if the remote access blade is active there is an "implied" rule to accept connections from any source.

Thank you.

Regards,

Tony

Re: Limit remote access connections from specific public IP

PhoneBoy — Tue, 04 Oct 2022 15:58:56 GMT

Yes, you are dealing with implied rules that permit access from anywhere.
Disabling those rules would involve editing $FWDIR/lib/implied_rules.def on the device and issuing the command fw_configload to regenerate the policy.
I do not know the precise edits one has to make on this file to achieve the precise objective you're after...or if it will even work.
In terms of necessary access rules once these are disabled, it should be similar to: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk42815&partition=Advanced&product=IPSec

topic Re: Limit remote access connections from specific public IP in Spark Firewall (SMB)

Limit remote access connections from specific public IP

Re: Limit remote access connections from specific public IP