Dynamic Blocking in R80.10

[Di_Junior]

Dear Mates,

In R77.30 it was possible to perform Dynamic blocking of a specific IP address in Smartview Monitor. Is it still possible to do it in R80.10? if yes, where?

How can one block hosts in internal and external network (Internet) from scanning the firewall in order to detect open ports, in other words how can one block port scan?

Thanks in advance

[Vladimir]

You can do this using SmartEvent.

There are separate options in it for blocking Internal and External scans.

SmartEvent still opens-up in the traditional SmartDashboard from within SmartConsole's Logging and Monitoring section:

  

[kyungho_park]

Do you know how to block hosts in internal and external network (Internet) by Web Service API

[PhoneBoy]

Covered pretty extensively here: https://community.checkpoint.com/thread/6649-list-of-different-ip-addresses-to-be-blocked