> Source: [sk183859](https://support.checkpoint.com/results/sk/sk183859)

# sk183859 - Gaia Portal  becomes unavailable after editing httpd2.conf

| Property | Value |
|----------|-------|
| Solution ID | sk183859 |
| Date Created | 2025-08-26 |
| Last Modified | 2025-09-01 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82 |
| OS | Gaia |

## Symptoms

- After upgrading from R81 to R82, the Gaia portal (HTTPS interface on port 443) listens on all Virtual Local Area Network (VLAN) gateway Internet Protocol (IP) addresses of the Security Gateway instead of only the core IP address.

## Cause

In R82, the Gaia Portal is designed to listen on all Security Gateway IP addresses by default. Editing Apache or Gaia web server configuration files (such as `httpd2.conf`, `httpd2.conf.templ`, or `httpd-ssl.conf`) to restrict the listening IP address is unsupported.  

Attempts to manually restrict access through these files either have no effect or result in complete loss of access to the Gaia Portal. Methods that worked for Secure Shell (SSH) binding in earlier versions do not apply to the web interface in R82.  

The supported method to control access is through the Gaia Portal **Accessibility** option and firewall security policy rules.

## Solution

1. **Set Gaia Portal Accessibility**
   * In the Gaia Portal, navigate to **System Management** \> P**ortal Settings**.
   * Set **Accessibility** to **According to the Firewall Policy**.
   * (Optional) Review the **Aliases** option for additional control.
2. **Create Firewall Rules to Restrict Access**
   * In SmartConsole, create rules that allow Gaia Portal access only from specific IP addresses.
   * Add rules that explicitly block access from unintended VLAN IPs.
3. **Verify Access**
   * Test access to the Gaia Portal from both allowed and blocked IP addresses to confirm that firewall rules work as expected.
   * Run the command below to confirm that the service listens on port 443:  
     `netstat -an | grep 443`  
     **Note:**The service may appear to listen on multiple IP addresses. Actual accessibility is restricted by the firewall rules, not by binding configuration.
4. **Do Not Edit Web Server Configuration Files:**
   * Do not modify `httpd2.conf`, `httpd2.conf.templ`, or `httpd-ssl.conf` files. Editing these files is unsupported and may cause loss of access to the Gaia Portal.

*
  *

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content