{"id":1871,"date":"2013-03-26T15:50:09","date_gmt":"2013-03-26T08:50:09","guid":{"rendered":"http:\/\/www.jaringankita.com\/blog\/?p=1871"},"modified":"2013-07-18T15:17:16","modified_gmt":"2013-07-18T08:17:16","slug":"ftp-over-ssl-traffic-through-check-point-firewall","status":"publish","type":"post","link":"https:\/\/www.jaringankita.com\/blog\/ftp-over-ssl-traffic-through-check-point-firewall","title":{"rendered":"FTP over SSL traffic through Check Point Firewall"},"content":{"rendered":"

FTP over SSL traffic through Check Point Firewall.<\/strong><\/p>\n

In the middle of configuring our Check Point Firewall, suddenly one of our users can’t access to an FTP server on the internet. The error message is like below:<\/p>\n

\"image001\"<\/a><\/p>\n

 <\/p>\n

As you can see on picture above, there is an error message said “Check Point Firewall-1 Secure FTP server running on….”. After further investigation, Check Point Firewall can’t inspect the traffic since the FTP over SSL is encrypted. Because the traffic is encrypted, there is no way that Check Point Firewall could decide whether to block or allow the traffic. <\/p>\n

The solution is we have to create two line of rules in order the FTP over SSL works well. The rule is like follow:<\/p>\n

\"\"<\/p>\n

Where:<\/p>\n

ftp-ssl-control\u00a0<\/strong> port is 990<\/p>\n

ftp-ssl-data port<\/strong> is >1023, and the source port is 989<\/p>\n

After inserting those two rules, then retest the FTP connection and it should resolve the problem. Please let us know if you are still facing the same problem.<\/p><\/blockquote>\n

 <\/p>\n

Source: \u00a0Check Point forum<\/p>\n","protected":false},"excerpt":{"rendered":"

FTP over SSL traffic through Check Point Firewall. In the middle of configuring our Check Point Firewall, suddenly one of our users can’t access to an FTP server on the internet. The error message is like below:   As you can see on picture above, there is an error message said “Check Point Firewall-1 Secure […]<\/p>\n","protected":false},"author":6,"featured_media":1878,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[600],"tags":[833,1046,836,1045,722],"class_list":["post-1871","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-checkpoint-2","tag-check-point","tag-check-point-firewall","tag-featured","tag-ftp","tag-ssl"],"_links":{"self":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts\/1871","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/comments?post=1871"}],"version-history":[{"count":6,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts\/1871\/revisions"}],"predecessor-version":[{"id":1880,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts\/1871\/revisions\/1880"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/media\/1878"}],"wp:attachment":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/media?parent=1871"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/categories?post=1871"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/tags?post=1871"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}