Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Oliver_222
Participant

Internet access for CheckPoint firewall objects problem

Good afternoon

We have a problem with access policies
We have configured Internet access for CheckPoint firewall objects.
But we also see that the user network 192.168.0.0 also passes this rule and they have access to the Internet. Can you tell me why this problem might occur?

0 Kudos
6 Replies
Chris_Atkinson
Employee Employee
Employee

Please share a redacted screenshot of the rules that you have created ?

If you look at the logs for this traffic which rules does it say it has matched?

CCSM R77/R80/ELITE
0 Kudos
Oliver_222
Participant

I will correct the input information: checkpoints have access to everything, but for some reason the network 192.168.0.0 when accessing our web resource passes the rule for checkpoints.

log - 1 screenshot
Access rule for checkpoint objects - 2 screenshot
Access rule for user network- 3 screenshot
NAT rule for user network - 4 screenshot

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Thanks and for completeness how is the "CheckPoints" object defined?

CCSM R77/R80/ELITE
0 Kudos
Oliver_222
Participant

This group contains firewall and management server objects

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Check the logic using a 'packet mode' search of the access policy and 'fw up_excute' from the gateway CLI.

Pending the results I would consult TAC further via a remote session to take a look without needing to censor the outputs like you might here.

CCSM R77/R80/ELITE
0 Kudos
the_rock
Legend
Legend

Have you done any captures to see why traffic is failing? Zdebug, tcpdump, fw monitor?

Andy

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events