bloquer les sites pornographiques (http et https) - Check Point CheckMates

bloquer les sites pornographiques (http et https)

I notice that some websites with indiscent content (sex, pornography) can be displayed while "Block inappropriate content" is activated.

so how do you get to blame these contents?

here are the screenshots

I presume that I am new user of checkpoint if it is also possible to have a guide to master a good configuration of the firewall.

thank you

Kudos

Click here to give kudos to this post.

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

6 Replies

G_W_Albrecht

MVP Silver

‎2018-02-2205:50 AM

Show option menu

Mark as New
Bookmark
Subscribe
Mute
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content

Firstly, this should be in SMB and SMP as this is a SMB device shown in screenshot. Second point is that you did configure it correctly, but URL Filtering relies on the CP URL Database that is contacted and the URL treated as defined for the reported category. If an URL is not known or categorized incorrectly, you can report that to CP very easily: Use the URL Categorization Online Tool ! Check Point provides this online tool that allows you to check whether a URL is classified under one of the categories of the URL Filtering Blade. After you check the URL, this tool also allows you to suggest an alternative categorization for the URL.

CCSP - CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist

Kudos

Click here to give kudos to this post.

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

junior_kakou

Contributor

‎2018-02-2208:34 AM

Show option menu

Mark as New
Bookmark
Subscribe
Mute
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content

In response to G_W_Albrecht

thank you Günther but the problem is that there are a lot of pornographic sites that happen to pass.

before the update from R77.20.50 to R77.20.70 all sites with indecent content were automatically

blocked. after the update I see that all are no longer

Kudos

Click here to give kudos to this post.

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

PhoneBoy

Admin

‎2018-02-2203:12 PM

Show option menu

Mark as New
Bookmark
Subscribe
Mute
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content

Agreed, so I moved the post to the correct place

Kudos

Click here to give kudos to this post.

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

Vladimir

Champion

‎2018-02-2205:55 AM

Show option menu

Mark as New
Bookmark
Subscribe
Mute
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content

If I understood your question correctly, you are asking how to add new sites to be classified and blocked with notification.

It also looks like you are using a small appliance with WebUI.

In this case, the "Block other undesired applications" should be enabled. Click on the "other undesired applications":

and either:

or:

Generally, small appliances with WebUI are seldom used in very complex environments and their policies are fairly simple.

That being said, there is pretty extensive administration guide available for those at:

Check Point 600/700 Appliances R77.20.75 Administration Guide

Regards,

Vladimir

1\ \ \ Kudo

Click here to give kudos to this post.

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

Vladimir

Champion

‎2018-02-2208:39 AM

Show option menu

Mark as New
Bookmark
Subscribe
Mute
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content

Have you tried adding "pornography" section in undesired apps?

1\ \ \ Kudo

Click here to give kudos to this post.

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

Pedro_Espindola

Employee

‎2018-02-2305:57 AM

Show option menu

Mark as New
Bookmark
Subscribe
Mute
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content

What sites are still passing? Do they use HTTPS? Did you turn on HTTPS Categorization or SSL Inspection?

Some nudity sites use shared certificates issued to sites such as cloudfaressl.com. In this case, HTTPS Categorization won't be enough, since it categorizes the site based on the subject of the certificate. You would have to use SSL Inspection for the gateway to be able to see the actual URL and block it.

Check the certificate to see what site it is issue to.

If it does not use HTTPS, proceed as Vladimir suggested.

Kudos

Click here to give kudos to this post.

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0