- CheckMates
- :
- Products
- :
- Harmony
- :
- Endpoint
- :
- Re: Windows Firewall Rules created by Endpoint Sec...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Windows Firewall Rules created by Endpoint Security
Hello,
When Endpoint Security Client is installed two inbound rules are created in Windows Defender firewall with advanced security. These two rules are :
- Check Point Endpoint Security VPN Service
- Check Point Endpoint Security VPN GUI
These rules allow any inboud traffic for TracSrvWrapper.exe and TrGUI.exe for all profiles (Domain, private and public).
On my test machine, I've disabled both rules and VPN still works as expected.
So what these rules are for ?
Kind regards,
Michel
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I assume those rules would be useful if for some reason you chose not to use the firewall included with the Endpoint Security client, which is most likely enforcing its policy instead.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
We have Windows Defender Firewall activated. On the checkpoint client side Firewall is also enabled and policy is set to default if not connected and to to personalized if connected.
Not clear for me how these two firewalls interact.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
sk102711: Tracsrvwrapper is one of the components of the Windows VPN client that is responsible for client side authentication and connection with VPN service. TrGUI is the Check Point Endpoint Security VPN GUI (see sk113492 and Task Manager).
Uses for these rules that come to my mind would be EPS client updates (that could be enforced) and changes made to trac_client_1.ttm on GW (topology is written in the trac.config
file, located on the client machine)
