Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
DmitriyShaiman
Explorer

Circuit emulation service (CES)

Hi,

We are evaluating Checkpoint SMB device to allowing only "Circuit emulation service" - (CES) ,

We need to harder as much as possible rule base,

I did not found something  pre-define for  CES,

Beside "Signature Tool" - sk103051 is there another secure way to enable this service?

 

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

From what I can tell, there are a few different standards that may be used here.
It should be trivial to allow the specific traffic for the standard(s) you're using by IP/port.
If you want specific, stateful inspection for the protocols themselves, that's quite likely an RFE and not something the signature tool will necessarily help with.

0 Kudos