Checkpoint inspection https and http

[lluner]

hi 

How do I do this in Checkpoint? Is it possible to associate port 443 only with the HTTPS protocol or not allow the SSH protocol on port 443?

[Chris_Atkinson]

Please review Protocol signatures option & HTTPS inspection for this requirement.

iirc there was also an IPS protection for SSH over non-standard ports as an alternative but please double-check the performance implications of this approach.

[AkosBakos]

Hi,

Create a custom service object, and set it as @Chris_Atkinson  said.

You can choose the protocol (1st screenshot)

Akos

[the_rock]

I cant recall what default settings are now, but what guys said makes total sense, just create new one and enable those options.

Andy

[AkosBakos]

By the "offical' https service object, those settings are grayed out. Thats why I created a screenshot of a total new object.

And don't forget, if you make a change on a service object, it will affecten on every rule, where the object in in use. So be careful 🙂

Akos

[the_rock]

Very true mate! Btw, it is possible to do on default service, just override the settings and option is there, but I agree, always better to create custom one in case like this.

Andy

[AkosBakos]

Exactly. A long long ago, I changed one default service object parameters... It wasn't the best deceison. 🙂

...live and learn...

Akos

[the_rock]

I think I know the reason mate...back then, you forgot to eat enough cabbage 😉

Andy