Protocol Migration from Checkpoint

[jvmartin]

Hello,

We have some protocols defined on Checkpoint, and we are not able to traduce to PAN 4.0.

FTP_mapped is defined as Protocol 6, match SRV_REDIRECT (21,0.0.0.0,21), set r_mhandler

HTTP_mapped is defined as Protocol 6, match SRV_REDIRECT (80,0.0.0.0,80)

backweb is defined as Protocol 17, match Backweb_match

Could somebody help me?

Thanks.

[reaper]

Hi

have these services been setup with a specific purpose in mind? the http_mapped and ftp_mapped are actually redirect services that would divert traffic to a predefined ip and port, but the services would look like eg. (80,10.1.1.1,87) where  port 80 is intercepted and forwarded to 10.1.1.1 on port 87 where the original destination IP should be that of the firewall

you should be able to easily reacreate this by setting up PBF to forward specific applications or NAT to do port translation

backweb is most likely a custom service, if you search your services tab it should be listed with its port information (search the UDP services)