Vulnerability scanner shows port 80 unsecured on 9100 gateway

[Steve114229]

I've been trying to stop a 9100 gateway accepting connections on port 80.

It was used for the mobile access SSL VPN, but that has now been disabled but there is still a response on port 80.

What happens is that if you use http://<IP address> then it shows as insecure in the address bar and the page says "The URL you requested could not be found on this server."

What happens is that if you use a http://<url> then it shows as secure in the address bar and the page  says "The URL you requested could not be found on this server."

So obviously its accepting the connection on port 80 and redirecting it, but I need to stop it accepting in the first place. I've read that if you are using MultiPortal then it creates an implied rule and accepts traffic on port 443 or port 80 if a portal is set to be accessible from All Interfaces. By Multiportal I'm assuming things like ID agent, user agent etc, which in this case we are, but none are set to "All interfaces"

Is anyone able to advise how I can stop behavior please?

[Lesley]

have you seen:

https://support.checkpoint.com/results/sk/sk165937