All hosts behind Check Point have open tcp/1720 port in port scan report

[Andrey_Bogatyre]

Hello everybody!

I have an noise information in port scan reports. If i check port 1720 with Nmap or Max Patrol I'm always find open 1720 port on all hosts behind Check Point even in Internet.

I removed Portscanner from any blades and firewall policy "any any".

This post https://community.checkpoint.com/thread/5499-open-ports-found-on-existing-and-non-existing-ips didn't help me, there isn't relove this problem.

Anybody have any ideas?

[Amir_Aliev · Accepted solution]

В ATRG: VoIP есть ссылка на sk43033:

Может быть поможет?

[Andrey_Bogatyre]

Спасибо Амир, помогло.

Убрал галку с сервисов в соответствии c sk44033

3. Un-check the "match for any" on the services properties.

Залил полиси и проблема решилась.