Check Point allows HTTP/HTTPS without rule

[vanhieuptit4]

I'm using Check Point R82. I’ve configured NAT for ports 80 and 443 from the internet to a backend server. However, I noticed that HTTP/HTTPS traffic is reaching the backend even though no explicit policy rule has been created to allow it.

 I suspect some Implied Rule might be allowing this by default.

 I tried disabling some implied rule options but it didn’t work — is there any official or correct way to do this in R82?

Thanks in advance!

[Lesley]

Do you see this traffic in the traffic logs and if so can you paste it here?

[vanhieuptit4]

this is log of firewall

[Chris_Atkinson]

Have you already reviewed sk105740, sk180808 ?

[Lesley]

Your NAT rule does not work because rule 0 goes before any other custom made rules. 

I assume you use external VIP IP of the firewall. If you use any other IP you have same issue? If you really want to use VIP IP you can follow this sk https://support.checkpoint.com/results/sk/sk178087