SSL Network Extender Portal is accessible externally although it was disabled

Product: SSL Network Extender
Version: R82, R82.10
OS: Gaia
Last Modified: 2026-05-26

Symptoms

• Changing the Gaia Portal port from 443 to 4434 (or any other port) causes the SSL Network Extender Portal to become accessible externally, even though SSL Network Extender is disabled on the Security Gateway object.

Cause

The SSL Network Extender Portal operates independently from the Mobile Access Software Blade and may become available when certain VPN-related settings are enabled (Remote Access community membership, Office Mode, Visitor Mode), regardless of the SSL Network Extender Client setting on the Security Gateway object. Changing the Gaia Portal port frees up port 443, allowing the SSL Network Extender Portal service to bind automatically.

Solution

This problem was fixed. The fix is included in:

• Jumbo Hotfix Accumulator for R82.10 starting from Take 19
• Jumbo Hotfix Accumulator for R82 starting from Take 103

If you choose not to upgrade, Check Point can supply a Hotfix. Contact Check Point Support to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.

Hotfix installation instructions:

Refer to sk168597 - How to install a Hotfix.

Article Properties

Access Level: General
Status: Approved
Date Created: 2025-11-19
Last Modified: 2026-05-26