Need help for classify TCP/80, TCP/264 on Gateway from external

[BunleangMeng_KH]

Currently on my Checkpoint gateway have service remote VPN and S2S VPN 

- remote access using Visitor Mode setting 

Can I disable port TCP/80 and TCP/264 from external when disable any impact to remote access?

Anyone can help classify?

Thanks 

[the_rock]

Visitor mode by default used port 443, though you dont even need visitor mode unless port 4500 is blocked for some reason.

https://community.checkpoint.com/t5/Remote-Access-VPN/Remote-access-without-visitor-mode-enabled/m-p...

[PhoneBoy · Accepted solution]

Disabling Visitor Mode means that users will be unable to configure your gateway as a VPN site.
TCP 264 can be safely disabled via: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

[BunleangMeng_KH]

Thank you all 

[the_rock]

phoneboy is right, I forgot to mention that...you need visitor mode to even create and connect to the site for the very first time. I believe though after that, you dont technically need it.

[Ruan_Kotze]

Having this box checked is one of the GUI defaults CP changed in R81.  Will save me a bit of time troubleshooting with new deployments, because I always forget to tick it first time around:-)

[the_rock]

Been there before, I feel the "pain" 😉