Clarification on Rule for Remote Access Connections

[RemoteUser]

Hi Mates,

I have a question regarding a configuration I noticed on the customer environment.

There is an open rule allowing traffic from Any to the cluster object (IP 10.20.30.40) on ports 80/443. When I connect via VPN client, this rule is being hit.

I checked under Global Properties > Firewall, and I see the option:
“Accept Remote Access control connections”, which allows Remote Access VPN clients to connect to the Security Gateways.

My question is: can I safely disable this rule, or is it better to verify something else before doing so?

[Chris_Atkinson]

To clarify which rule are you considering disabling the configured rule or the global properties option?

sk180808 / sk105740 / sk60773 often come up in discussion relating to similar.

[RemoteUser]

Hi @Chris_Atkinson

Yes, I need to disable an explicit rule in the rule base (src: Any → dst: cluster object → services: 80/443 → action: Accept).

When I connect using the VPN client, I can see that my public IP matches this rule (443). I haven’t changed anything in the Global Properties options.