Limit remote access connections from specific public IP

[tony1]

Hello,

I would like to ask for advice. Is there a way to limit remote access connections just from specific public IP on locally managed 1590? It seems like if the remote access blade is active there is an "implied" rule to accept connections from any source.

Thank you.

Regards,

Tony

[PhoneBoy]

Yes, you are dealing with implied rules that permit access from anywhere.
Disabling those rules would involve editing $FWDIR/lib/implied_rules.def on the device and issuing the command fw_configload to regenerate the policy.
I do not know the precise edits one has to make on this file to achieve the precise objective you're after...or if it will even work.
In terms of necessary access rules once these are disabled, it should be similar to: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...