CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SmartDefense
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-09-15
Junior Member
 
Join Date: 2006-06-07
Posts: 4
Rep Power: 0
bobgandalf has an average reputation (10+)
Default AI Tunneling Detection

Hi all,

in SmartDefense tab, under Application Intelligence I've selected the "Tunneling Detection" option to detect the unwanted SSL Tunneling.

There is already a list of common ports excluded like POP3S, IMAPS and others.

We use a non-common port for SSL traffic (TCP 2444)
How to add this port to the exclude list?

Thank you for your help,
Bob.

PS: NGX R60

Last edited by bobgandalf; 2007-09-15 at 05:03.
Reply With Quote
  #2 (permalink)  
Old 2007-09-19
Junior Member
 
Join Date: 2007-01-26
Posts: 19
Rep Power: 0
mikem has an average reputation (10+)
Default Re: AI Tunneling Detection

Same problem here.

Later version of NGX allows you to manually identify ports for exclusion, R60 does not.

You will have to upgrade to get the capability.

mike
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 11:18.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0