Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
mk1
Collaborator

SmartConsole through SOCKS proxy

Hello all,

Are you aware of any way to forward SmartConsole traffic through SOCKS proxy? I noticed there's UseDefaultWebProxy option in SmartConsole.exe.config file, but it's not what I'm looking for.

Thank you!

0 Kudos
7 Replies
G_W_Albrecht
Legend
Legend

If you can find a transparent client this should be possible - SmartConsole will know nothing of the proxy. CP EPSS uses CPTNL server SOCKS proxy on Endpoint Policy Server, though...

CCSE CCTE CCSM SMB Specialist
0 Kudos
mk1
Collaborator

Thank you for your reply, but I didn't get the point. What do you mean with "transparent client"?

0 Kudos
G_W_Albrecht
Legend
Legend

Socksifiers - like tun2socks or Win2Socks. But beware: Due to lack of request and packets exchange encryption SOCKS is vulnerable to man-in-the-middle attacks and IP addresses eavesdropping which in consequence clears a way to censorship by governments. 

CCSE CCTE CCSM SMB Specialist
0 Kudos
mk1
Collaborator

win2socks seems fine, unfortunately 3rd pary software is not an option in my case. It's strange why Check Point didn't add SOCKS as a feature on their client.

0 Kudos
G_W_Albrecht
Legend
Legend

Due to lack of request and packets exchange encryption SOCKS is vulnerable to man-in-the-middle attacks and IP addresses eavesdropping

CCSE CCTE CCSM SMB Specialist
0 Kudos
mk1
Collaborator

I'm not sure for what kind of setup your constraints are, but I believe I should be fine if I forward my traffic through a SSH tunnel.

0 Kudos
PhoneBoy
Admin
Admin

I know from experience that you can forward SmartConsole through SSH tunneling using the following TCP ports: 443, 18190, 19009.
SOCKS, however, is not supported, nor is such support planned.
Web SmartConsole (https://mgmt-ip/smartconsole), available from R81, can be used through a web proxy.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events