Protection of port 80

[Network_M]

I have a web-site facing to public.

3 ports are open in Security Policy: 80/tcp, 443/tcp, 53/udp.

I have redirection on web server from 80 to 443, that is ok.

But there are some scans and potential script executions on port 80.

Firewall shows that scripts as accepted.

IPS is enabled.

How to protect port 80? Or is it possible redirect port 80 to 443 on firewall level?

Any valuable advices are appreciated.

Thanks!

[Chris_Atkinson]

Plenty of options here depending on what you're trying to achieve including separate offerings such as AppSec.

With that said @Danny  provided some examples previously on things like blocking IoT Scanners / TOR Exit nodes / Geolocation Policy, refer:

https://community.checkpoint.com/t5/Management/HowTo-Block-IoT-scanners-like-Shodan-Censys-Shadowser... 

[Network_M]

Thank you, but there are so many scanners in the internet, even scriptkiddies can execute scripts.

It will not be solution I think.

[Chris_Atkinson]

As above if you provide something a little less generic we will probably be better able to guide you.

Not withstanding to get the best out of the available gateway controls HTTPS inspection will be a factor.

[Network_M]

Can HTTPS inspection control port 80? It is not encrypted port.