Check Point Basics R80.40 - SmartConsole Part04 - Application control and URL Filtering

[@thebasement_bybap]

All long my carrer I've being working only with R&S and recently I started to work with Network Security and this series of videos is really helping me in the operations. I'd like to thank you for this content!

[@MagnusHolmberg-NetSec]

Thank you for the comments :) Network security is a really fun topic so good luck in your adventure :)

[@huxleyalec3731]

i know im asking the wrong place but does any of you know a method to log back into an instagram account?? I stupidly lost my password. I would love any assistance you can offer me!

[@rizwanrashid172]

i was struggling to understand inline layers concept in check point and after this video my concept is clear now :) , very professional explanation,.

[@MagnusHolmberg-NetSec]

wonderfull, next up is dynamic objects :)

[@GhasemASHJAEI]

very professional explanation. Thanks

[@giri455161]

Really good example of explanation of App & URL filtering and In-line layer

[@MagnusHolmberg-NetSec]

Girjesh Sharma thank you, the GUI part is a big thing within CCSA and actually check point in a whole. The inline layer gives great performance increase when it comes to larger rulebases allowing the firewall to jump between rules easier :) From r80.10 the rule order is actually column based making it faster. Seen from user it’s still top down, but it can skip a lot more thing.

[@LundgrensScania]

11:52 , checkpoint bamboozled you :( Great video, thanks Magnus!

[@amitpatil1900]

Excellent Magnus!! Thank you for sharing !! following your channel and looking forward.

[@MagnusHolmberg-NetSec]

Thank you :) more to come!

[@mikulasriecky9612]

Great videos bro, keep it up. Thanks

[@charlesj1229]

best series ! i take my exam in 3 week . very informative

[@MagnusHolmberg-NetSec]

Aa that’s awesome, good luck :) The serie is missing a few parts that are within CCSA. In this case VPN, backup and Smartevent. But hopefully it’s a good addition in your study :) Let us know how you did in a few weeks :)

[@MagnusHolmberg-NetSec]

How did it go with the certificate :)!

[@charlesj1229]

@@MagnusHolmberg-NetSec I miss the exam.. Only 3 points to pass it. I will retake the exam soon. But I got the knowledge to work with checkpoint on my job. So I thank you so much :)

[@MagnusHolmberg-NetSec]

@@charlesj1229 better luck next time! what part of the exam did you find the hardest?

[@cuscris8840]

Thanks Magnus. You are an amazing trainer.

[@MagnusHolmberg-NetSec]

Thank you for the support :)

[@Pazitanec107]

Very good videos to learn from, thanks! ✌🏻

[@MagnusHolmberg-NetSec]

Thank you and your welcome :)

[@Tathamet]

This is gold cheers mate!

[@rizwanrashid172]

Superb .. excellent explanation

[@MagnusHolmberg-NetSec]

Thanks m8!

[@alexandrpertsev4568]

Thanks a lot for your video! There are very few decent Checkpoint tutorial videos on the Internet.

[@MagnusHolmberg-NetSec]

Thank you, I hope mine are starting to become more then decent :D

[@DeepakKumar_297]

Informative video 👍🏻

[@MagnusHolmberg-NetSec]

Thank you,

[@chandrareddy7696]

Thank you for sharing valuable content

[@MagnusHolmberg-NetSec]

Thank you :) are you going for the CCSA or just some fresh up :)

[@oridayan9547]

thanks Magnus, you're awesome!

[@MagnusHolmberg-NetSec]

Thank you!

[@anilrouter4959]

Hi Magnus, how about creating a URL rule for a custom URL which is not a predefined

[@MagnusHolmberg-NetSec]

It works, but you really need to use a new version, i would say R80.30 or higher to be able to have DNS working correctly. There are improvements in R81 when it comes to VSX as its adding the possibility to have DNS server set per VS instead of having all going via VS0.

[@tryhackme5636]

Hey Magnus, I am constantly getting the error message - Unable to Connect to Server. Any ideas how to fix it on the demo or what may be causing it. Tried all troubleshooting from the site.

[@MagnusHolmberg-NetSec]

When using demo mode on smartconsole? If so I don’t really know, never experience that. Maybe check on checkmates community and add some print screens so it’s easier to understand the issue. If in real production then you have all sort of things. Server not up and running 100% it’s takes a few min to boot up, not all ports open to be able to use the tool etc etc.

[@tryhackme5636]

@@MagnusHolmberg-NetSec Thanks, will do! :)

[@vickyraj-yv2md]

Hi Magnus, I have a doubt! As per the example shared regarding in-line layer concept which carries a policy package in it and this same policy package can be used any where in the rule base after calling inline layer object. But my question is, in case if we edit something in it then the same will replicate allover the rule base where this inline layer policy package is called even we don't require. so I think we should use this feature very wisely.. Please correct me if I am wrong.

[@MagnusHolmberg-NetSec]

Yes it’s correct, if you reuse an inline layer and change it. The change is replicated everywhere where the inline layer is used (just like changing the content in a group) So if you don’t want the same rules, then just make a new layer and don’t reuse it :) use it the same way you would do with groups.

[@vickyraj-yv2md]

@@MagnusHolmberg-NetSec Thankyou for your quick reply!

[@nvlsvenu9336]

How do we block custom urls?

[@sreejith_jinachandran]

Very Nice.

[@MagnusHolmberg-NetSec]

Thank you for watching and commenting :)

[@luisfcaetano]

Magnus, you could create a video about SNI and HTTPS Inspection?

[@MagnusHolmberg-NetSec]

Hi Luis, Sure i will try to fix that have some videos in the process before. SNI and HTTPS is abit tricky to really lab on.

[@saurabhsenger9541]

Hello Magnus Wishing you a very Happy new year..!! Your videos are very helpful & informative. I have doubt like how would we allowing an ssh or any application on any custom port like 8080 etc then how we gonna allowed that ? Thanks in advance..!!

[@MagnusHolmberg-NetSec]

for just normal ports doing a normal rulebase should work for that :) Maybe this one help some. kzbin.info/www/bejne/hqfGgqCEZ7Z0rNU

[@saurabhsenger9541]

@@MagnusHolmberg-NetSec Allowing simple custom ports like 8080 in rule base will only help us in checking the traffic at layer 4 but if we want to check at layer 7 that application accessed is that specific one we have allowed that how we gonna do that for example we have a server running https services at 2122 then how can we allow the access from src to destination only web traffic at 2122? Thanks in advance

[@MagnusHolmberg-NetSec]

@@saurabhsenger9541 in older version you needed to use application controll policy for this (was a dedicated tab). but in new version this is included in the normal rulebase. So in newer versions functions such as geopolicy/application controll/url filter etc is part of the normal rulebase and the traffic will pass those filters aswell if they are enable on the GW.

[@MagnusHolmberg-NetSec]

function was intruduced within R80.10 and called unified policy. When creating a new policy or editing an old policy you have the option to include application controll within it :)

[@MagnusHolmberg-NetSec]

supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120964

[@jwano2603]

I'm trying to block facebook or other https site, but it doesn't work, I enabled https inspection and https categorize, but it does not work, can someone help me?

[@MagnusHolmberg-NetSec]

in this case i would do a post within community.checkpoint.com/ where u are able to add pictures and such. within these comments its not possible to add or show so much.

[@kesha1jones403]

kzbin.info/www/bejne/anzKg4iLh7OlsLc

[@kesha1jones403]

This will help you block Facebook.

[@surajrajendrapandey6917]

Thanks Sir very useful for us, i want to know how can we block hash file on checkpoint ...? can you explain

[@MagnusHolmberg-NetSec]

am not sure. maybe check on this one. dl3.checkpoint.com/paid/04/04d1bb5f621bbcda1e3212a424ac81cb/CP_SignatureTool_AdminGuide.pdf?HashKey=1616683120_a6bb35f5d8bd989c0bf7ac7e52d9a6b6&xtn=.pdf community.checkpoint.com/t5/Security-Gateways/Allowing-special-KZbin-Videos/m-p/114558#M16030