IKE service

erichanno

Hi,

Our analysis shows that the IKE service ( gateway) is clearly visible and can be used by attackers for reconnaissance and targeting. How can we make the IKE service not clearly visible ("hide") in ATP 200?

I am waiting your answer

Zyxel_Jeff

Hi @erichanno

https://community.zyxel.com/en/discussion/18635/ike-service

Welcome to the Zyxel community. Could you please share a screenshot to help describe the problem? Feel free to hide sensitive information, such as source and destination IP addresses, in the screenshot. Thanks.

jiohn

To hide the IKE service on an ATP 200, you can configure the firewall to block or obscure IKE traffic by disabling unnecessary services or changing the default ports for IKE (UDP 500/4500).

PeterUK

https://community.zyxel.com/en/discussion/comment/71817#Comment_71817

How would you change them default ports for IKE (UDP 500/4500)😏

MarkoD

I suggest you limit the incoming traffic to IKE service with GeoIP restrictions via Security Policy rules. It works perfectly for us.