Circuit emulation service (CES)

[DmitriyShaiman]

Hi,

We are evaluating Checkpoint SMB device to allowing only "Circuit emulation service" - (CES) ,

We need to harder as much as possible rule base,

I did not found something  pre-define for  CES,

Beside "Signature Tool" - sk103051 is there another secure way to enable this service?

[PhoneBoy]

From what I can tell, there are a few different standards that may be used here.
It should be trivial to allow the specific traffic for the standard(s) you're using by IP/port.
If you want specific, stateful inspection for the protocols themselves, that's quite likely an RFE and not something the signature tool will necessarily help with.