topic Re: Port forwarding to mail server stops working when enabling Threat prevention blades in Spark Firewall (SMB)

Port forwarding to mail server stops working when enabling Threat prevention blades

engineer-a — Mon, 07 Aug 2023 06:59:29 GMT

Hi, guys!

Port forwarding to mail server stops working when enabling Threat prevention blades,

And only when we disabling whole 3 TP blades the mail server starts to work,

SSL inspection is disabled,

SMB SG-1800

Firmware (R81.10 - 996000575) is up to date

Re: Port forwarding to mail server stops working when enabling Threat prevention blades

G_W_Albrecht — Mon, 07 Aug 2023 07:27:06 GMT

Any logs for the issue available ? I would contact TAC (by chat if locally managed) to get this resolved asap!

Re: Port forwarding to mail server stops working when enabling Threat prevention blades

Amir_Ayalon — Mon, 07 Aug 2023 07:30:35 GMT

996000575 is a very old firmware

please test on R81.10.07 Build 996001430

https://support.checkpoint.com/results/sk/sk180628

Re: Port forwarding to mail server stops working when enabling Threat prevention blades

engineer-a — Mon, 07 Aug 2023 11:46:16 GMT

Thank you for the reply, but we have performed upgrade with a named firmware and it didnt't help,

Also:

the issue is repeated even though all blades are in detect mode;

mail server added to threat prevention exclusions;

(answer form TAC)
Please enter the WebUI -> Advanced Settings and find the option "Anti-Spam policy - Transparent proxy" and disable it - didn't help.

Only if we are disabling all Threat Prevention blades the mail server starting to work.