alowing certain ports

[ssphoenix]

I am new to checkpoint. I would like to find out how to create rules for certain ports to allow or disallow. Apparently some of the higher ports are disabled and I need some of them to be open.

Thanks in advance.

 

[Piloria]

if your firewall is set up correctly All ports are closed by default.

The two most important rules in your firewall are the stealth rule (any - firewall - any - drop) this stops any contact to your firewall it should always be first
(or second after your GUI client rule
GUI_client_machine - firewall - FW1_mgmt - allow)

and the catch all rule (any - any - any - drop) this stops everything that hasent been picked up by the rules.

if you use the wizards when creating new policys these are created automaticly



from the management client
Drop down menu Manage - services

create a new service (TCP)
Give it a name and then enter the port number you want to open (or close)

After your stealth rule put in new rules
source dest service action
network or Machine - any - new_port - allow (or drop)