Unauthorized VPN access to internal networks via IKEv2 tunnel (CVE-2019-8456)

[Dan_Roddy]

How would I alert on an unauthorized attempt to gain access to our site-to-site VPN in the case of CVE-2019-8456?

Thank  you,

Dan

[_Val_]

I am not sure you can. The vulnerability and prevention steps are listed here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

If you cannot upgrade to the specific HFA where the issue is fixed, it would make sense to disable IKEv2 meanwhile