How to add some ip address to stateful exception list

[cphseric]

For some reason, we may need to add some APPs into the exception list when enable stateful inspection. Can you please advise where to add those exception list ? How to do it in both Gui or CLI?

[Chris_Atkinson]

Before you do have you reviewed sk180364 for relevance?

If you still need to then please look into sk11088.

Refer also:

https://community.checkpoint.com/t5/General-Topics/Disable-Stateful-Inspection/td-p/120107

[cphseric]

Thanks Chris for your reply . So if the user.def file is only place to add this exception ip address for stateful inspection. Is it possible to do that in GUI like smart console ?

[the_rock]

Im pretty positive you cant do this via smart console. The best you could do is below in global properties, but ONLY lets you add the gateway itself.

Andy

 

[PhoneBoy]

There is no SmartConsole method for excluding a specific flow from stateful inspection.
Having said that, there must still be rules to permit the necessary traffic.