- Products
- Learn
- Local User Groups
- Partners
- More
Firewall Uptime, Reimagined
How AIOps Simplifies Operations and Prevents Outages
Introduction to Lakera:
Securing the AI Frontier!
Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
HTTPS Inspection
Help us to understand your needs better
CheckMates Go:
SharePoint CVEs and More!
Hello,
I'm trying to block access to a specific network object, but whatever I do, access is not blocked.
Any ideas why ?
Screenshot of rule base attached, any hint will be appreciated.
BTW, outgoing to the internet (wan) blocking rules work fine, only internal. isn't these smbs gateways able to block internal objects ? will be a bummer if so...
Thanks !
Of course that is possible if the SMB is configured appropriately ! Did you read Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.30 Locally Managed Administration Guide p.77 as i suggested ? Next sentence after the one cited is:
Configure multiple bridges between interfaces. Traffic in a bridge is always monitored and inspected by the appliance.
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.30 Locally Managed Administration Guide p.77:
Traffic is not monitored or inspected between the LAN ports of a switch.
Does that mean I have a firewall that cannot monitor internal packets or block unwanted connection between different objects in the network ? sounds a basic request for such expensive SMB, no ?
Of course that is possible if the SMB is configured appropriately ! Did you read Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.30 Locally Managed Administration Guide p.77 as i suggested ? Next sentence after the one cited is:
Configure multiple bridges between interfaces. Traffic in a bridge is always monitored and inspected by the appliance.
Only if the traffic is routed, not switched. By default, internal interfaces are configured as a switch. If you segment your internal network, and each internal interface will be connected to a different segment, while the appliance is routing from one segment to another, then yes, you can use filtering rules for internal networks.
That looks interesting indeed. will try that (have to admit I was missing that :))
Thanks!
Tried to change it to true, but rule was not caught. Need to restart anything ?
Thanks
Once again, these options only work on a routed, not switched traffic. Also, deep inspection means IPS and other advanced blades are applied on routed LAN traffic on top of the regular network security rule base, which is not enabled by default, to save on performance.
Understood, i was more looking for a rule based actions. So i will need to create vlans or separate the network so it goes to a different port in the firewall , right ?
In it's simplest form the source & destination would normally be different subnets.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
User | Count |
---|---|
13 | |
3 | |
2 | |
1 | |
1 | |
1 | |
1 |
Tue 07 Oct 2025 @ 10:00 AM (CEST)
Cloud Architect Series: AI-Powered API Security with CloudGuard WAFThu 09 Oct 2025 @ 10:00 AM (CEST)
CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!Thu 09 Oct 2025 @ 10:00 AM (CEST)
CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!Wed 22 Oct 2025 @ 11:00 AM (EDT)
Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents OutagesAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY