SmartConsole through SOCKS proxy

[mk1]

Hello all,

Are you aware of any way to forward SmartConsole traffic through SOCKS proxy? I noticed there's UseDefaultWebProxy option in SmartConsole.exe.config file, but it's not what I'm looking for.

Thank you!

[G_W_Albrecht]

If you can find a transparent client this should be possible - SmartConsole will know nothing of the proxy. CP EPSS uses CPTNL server SOCKS proxy on Endpoint Policy Server, though...

[mk1]

Thank you for your reply, but I didn't get the point. What do you mean with "transparent client"?

[G_W_Albrecht]

Socksifiers - like tun2socks or Win2Socks. But beware: Due to lack of request and packets exchange encryption SOCKS is vulnerable to man-in-the-middle attacks and IP addresses eavesdropping which in consequence clears a way to censorship by governments. 

[mk1]

win2socks seems fine, unfortunately 3rd pary software is not an option in my case. It's strange why Check Point didn't add SOCKS as a feature on their client.

[G_W_Albrecht]

Due to lack of request and packets exchange encryption SOCKS is vulnerable to man-in-the-middle attacks and IP addresses eavesdropping

[mk1]

I'm not sure for what kind of setup your constraints are, but I believe I should be fine if I forward my traffic through a SSH tunnel.

[PhoneBoy]

I know from experience that you can forward SmartConsole through SSH tunneling using the following TCP ports: 443, 18190, 19009.
SOCKS, however, is not supported, nor is such support planned.
Web SmartConsole (https://mgmt-ip/smartconsole), available from R81, can be used through a web proxy.