Who rated this post

HI @Deepraj_Patil,

The following overview shows all open ports used by a Check Point gateway and management server.
https://www.checkpoint.tips/doc/Ports.pdf

Here is a picture (the same one can be found in the PDF)


Open Ports:
80        -> You should check this out (Static NAT to a web server , ...)
443      -> Multi Portal Daemon, Mobile Access Blade, Remote Access VPN, (Static NAT to a web server , ...)
500      -> IPSec VPN
18264  -> VPN Cert. fetch

In addition to UDP 500, the UDP port 4500 may also need to be open for NAT-T, ensuring VPN connections work properly when endpoints are behind NAT devices.

Here's what you can do:

• Change the position of rule processing under "Global Properties → Firewall" to "befor last" (Please proceed with caution)

• Create stealth rules on the firewall to block specific ports and access attempts.