Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
carl_t
Contributor

IPS exceptions

Hi All

Can anyone talk to me about the IPS exceptions on the R80 Firewall.

If you want to create an exception, you generally apply it to whatever policy you have on applied to the Firewall.

What are the Core exceptions?

Also if we bypass certain things, I am guessing this doesn't get scanned at all?

Many thanks

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

For R80+ gateways, apply the exceptions as part of the Threat Prevention policy applied to the gateway.
Because of where they are enforced in the product, there are ~40 protections that are considered "Core Protections" and must be handled differently.
See: https://community.checkpoint.com/t5/IPS-Anti-Virus-Anti-Bot-Anti/Exceptions-on-IPS-Core-Protections/...

For Core Protections, an Exception means "don't look for or block on this traffic."
For all other IPS protections, it depends on what you set the override to.
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events