How to Block all Remote Access from outside | Only allow a few IP-Public of device

[NhatKha]

Hello everyone,

Is it possible to block *any source to access/create a site in Remote Access VPN? I'm only wanting to allow some source/device from outside (src: IP-Public) can remote access.

I'm create a stealth rule, block all source access to external ip of Gateway:

now from my computer I can't ping/ssh to gateway, but still access webUI (443) and remote access to Gateway successfully.

Is there other rule that I miss? Please help me.

Purpose: only allow some devices to connect to remote access vpn (whitelist using IP-Public of device)

Thank you so much and have a great day!

Best regards,

Kha

[Madmaks]

I'm curious about this too. You can specify this on a country basis on one of other firewall vendor. For example, you can tell me to only connect via VPN from China.

I think it is related Implied Rules

[PhoneBoy]

There are two elements of Implied Rules here:

• Creating the site that's HTTPS to port 443, allowed via Implied Rules. You can make them "before last" (and control with regular rules) with: https://support.checkpoint.com/results/sk/sk105740 
• The actual VPN connection (starts with IKE on UDP 500). Short of hacking .def files, this is probably the easiest solution to implement: https://community.checkpoint.com/t5/Remote-Access-VPN/How-to-Block-all-Remote-Access-from-outside-On...