policy to block ssh

[nflnetwork29]

hi i created a simple block policy . set service to ssh. set source to any. set destination to my gateway object. set action to block. it does not work. what am i doing wrong?

[the_rock]

What are you seeing in the logs when you test the ssh? Its possible that it might not even be hitting that rule...do you have a screenshot of it?

[funkylicious]

hi, you mean action to drop ?

are there perhaps any other rules above it that may permit access?

[nflnetwork29]

should this be unchecked in global properties?

Will unchecking this mess up my SIC or my ability to push policy from the management server?

[the_rock]

 I would not bother with that, its there for a reason...funkylicious gave good reply. Make sure there is no rule ABOVE the one you set up to allow the traffic.

[nflnetwork29]

there is no rule above it . 

[funkylicious]

can we see a screenshot of the rule and of the log that says it's permitted ?

[nflnetwork29]

the global property allowing the SSH and the WEB Admin traffic will override any policy will it not ?

[nflnetwork29 · Accepted solution]

the global property needs to be unchecked. just confirmed with checkpoint support.