Server net exposure

[Taiwo]

Server net exposure

Hi ,

Please am new to checkpoint. I have some servers that i want to give access to the internet briefly so that some of their resources can be update on the net. Please how do i do through this. I need a good procedure on how to achieve this as am from a production environment.

Attached is the captured representation. All objects in this configuration have access to the internet already and always. My problem is how do i add my new server to this list for temporary internet access?

Swift responses will be well appreciated from experienced fellows.

Thanks

[Taiwo]

Hi ,

Please am new to checkpoint. I have some servers that i want to give access to the internet briefly so that some of their resources can be update on the net. Please how do i do through this. I need a good procedure on how to achieve this as am from a production environment.

Attached is the captured representation. All objects in this configuration have access to the internet already and always. My problem is how do i add my new server to this list for temporary internet access?

Swift responses will be well appreciated from experienced fellows.

Thanks

[PhoneBoy]

You can add the relevant objects representing the servers to this rule.
However, if your goal is "temporary" access, then you should create a new rule and use the Time field to restrict the access to whatever end date is appropriate.
Note that Time Objects in releases prior to R80.x have a performance impact (no SecureXL templates), so this rule will probably need to be near the bottom of the rulebase to minimize the performance impact.

Note that "All_Internet" and "Any" are effectively the same thing in this context.

Note that once the specified time has elapsed, the rule will still be present in the rulebase but won't be active.
You will have to manually remove it from the rulebase afterwords.
Or you can modify the existing rule to include outbound access without the performance impact, and remove it from the rule later.

Either approach will work.