Protocol Migration from Checkpoint

jvmartin — Mon, 28 Mar 2011 10:38:25 GMT

Hello,

We have some protocols defined on Checkpoint, and we are not able to traduce to PAN 4.0.

FTP_mapped is defined as Protocol 6, match SRV_REDIRECT (21,0.0.0.0,21), set r_mhandler

HTTP_mapped is defined as Protocol 6, match SRV_REDIRECT (80,0.0.0.0,80)

backweb is defined as Protocol 17, match Backweb_match

Could somebody help me?

Thanks.

Re: Protocol Migration from Checkpoint

reaper — Mon, 28 Mar 2011 12:56:23 GMT

have these services been setup with a specific purpose in mind? the http_mapped and ftp_mapped are actually redirect services that would divert traffic to a predefined ip and port, but the services would look like eg. (80,10.1.1.1,87) where port 80 is intercepted and forwarded to 10.1.1.1 on port 87 where the original destination IP should be that of the firewall

you should be able to easily reacreate this by setting up PBF to forward specific applications or NAT to do port translation

backweb is most likely a custom service, if you search your services tab it should be listed with its port information (search the UDP services)

topic Re: Protocol Migration from Checkpoint in General Topics

Protocol Migration from Checkpoint

Re: Protocol Migration from Checkpoint