GW to Internet Traffic

[Sh3r]

I am currently undergoing a security audit and one of the points which came was why "Any" access from Gateways to internet is allowed via "Accept Outgoing Packets Originating From Gateway"  in global properties.

I remember speaking once with an SR attendant that if traffic is enabled from Gateways to "any"  its not particularly a security threat as it is required for fetching updates.. can i get a reference article for this ?  

[_Val_ · Accepted solution]

Look into sk83520, sk94508, and sk106251

[Sh3r]

Thank you.. very helpful

[_Val_]

Also, you may want to read this thread: https://community.checkpoint.com/t5/General-Topics/Updatable-Object-for-Checkpoint-services/m-p/1195...