topic Re: Port Translation in Spark Firewall (SMB)

Port Translation

Jon_AK — Fri, 19 May 2023 21:55:22 GMT

With a CP1575 appliance, is there a way to create a rule to work with port forwarding to ensure the appliance does not translate the intended port to a different port? As indicated in a previous post, I have a server object created to forward HTTP traffic on port 80 and 443 to a IIS web server. The appliance is forwarding as designed but it is translating port 80 into a different, random port number. Unfortunately, according to Microsoft, if the IIS website is bound to port 80, it will listen only to port 80 traffic. As a result, our website is not responding to the incoming port 80 traffic. I went as far as reverting back to an earlier firmware version where this was working fine but, that did not cure the ill. I read some CP documentation for a 1500 series but the settings being described do not match & am not able to find in the UI where to address having the appliance not translate the port into a different port.

Re: Port Translation

PhoneBoy — Sat, 20 May 2023 00:30:12 GMT

I recall that someone else posted about this same problem.
Believe it's a bug and the TAC should be consulted: https://help.checkpoint.com

Re: Port Translation

Jon_AK — Sat, 20 May 2023 00:34:41 GMT

Yes, am waiting on a response from tech support to this very question. Based upon an almost 90 minute troubleshooting procedure, it is believed it is a bug. Since I do not know much about the CLI yet, thought there might be an end around to mitigate this.