This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
ABOUT CHECKMATES & FAQ
Create a Post
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Help

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Paulo_Rosa
Participant
‎2018-07-13 01:51 PM

SCADA TCP Sessions and Visibility

Hi,

Does Checkpoint 1200R , in monitor mode, as the ability to classifiy the traffic using "application control" even when it not sees the begining of session (SYN Packet). 

What is the beahavior for Long Duration SCADA TCP sessions ?  Does it Application control still works ? Should I see the comenads sent in the session ? When it appears ? when session closes or during the estabished session ?

Thanks

2 Replies
Pablo_Barriga
Advisor
‎2018-07-15 08:39 PM

Hello , I have analyzed several companies with monitor mode, you can try to configure this parameters to see all the traffic.

0 Kudos
PhoneBoy
Admin
Admin
‎2018-08-01 10:40 AM

This may also be relevant: How to activate inspection on internal traffic on 600/700/1100/1200R/1400 appliances 

0 Kudos