Smart Defense --> Application Intelligence --> Web --> HTTP Protocol Inspection --> Maximum HTTP Header Length
JF
On Mon, 13 Dec 2004, Eric Gomes Balcone wrote:
This configuration is the http header size, i m tried it, but didn�t solve my problem.
Eric
|---------+--------------------------------------------> | | "O'Sullivan, Mairtin" | | | <[EMAIL PROTECTED]| | | > | | | Sent by: Mailing list for | | | discussion of Firewall-1 | | | <[EMAIL PROTECTED]| | | KPOINT.COM> | | | | | | | | | 12/10/2004 01:28 PM | | | Please respond to Mailing list | | | for discussion of Firewall-1 | | | | |---------+--------------------------------------------> >-----------------------------------------------------------------------------------------------| | | | To: [EMAIL PROTECTED] | | cc: | | Subject: Re: [FW-1] Invalid Content Length | >-----------------------------------------------------------------------------------------------|
In your SmartDefense settings you can increase the allowed content length. That should solve the problem.
-----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Eric Gomes Balcone Sent: 10 December 2004 14:29 To: [EMAIL PROTECTED] Subject: [FW-1] Invalid Content Length
I have a problem when external users access exchange webmail (OWA) and try to download attach.
Browser Error:
The page cannot be displayed
Follow checkpoint log message:
Number: 176381 Date: 10Dec2004 Time: 9:29:17 Product: VPN-1 & FireWall-1 Interface: daemon Origin: xxx.xxx.xxx.xxx Type: Log Action: Reject Protocol: tcp Service: http (80) Source: computer_1 Destination: yyy.yyy.yyy.yyy Rule: 14 Source Port: 3775 Information: resource: http://yyy.yyy.yyy.yyy/exchange/Attach/read.asp?obj=00000000194BECE570CB27439C0C45CB5A0DDA110700EE9EFFD51D8545498C6C43D2A6BB269300000000B23000007F8FBF7CBEE63D45828B5A57C6CC3CEC00000062F7650000&att=ATT-0-DF3630946C89DC4992408EDE3D68CBF2-NewTextD.txt
reason: Web security: Inavlid 'Content-Length' header in response.
Rule 14 Configuration: This rule is a accept from all external connections (http service) to my webmail server.
OBS: The NAT to webmail server is perfect When i access webmail server from internal network url (it does not pass for firewall), this function too is perfect.
- In my checkpoint configuration, the option 'enable_propfind_method' is checked.
- This error doesn�t was find in checkpoint knowledge base anything.
I don�t know what i can do to resolve this problem.
My checkpoint version is VPN-1/Firewall-1 R55 HFA 08
What can i do?
Eric
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
---------- Jean-Francois Gobin - Administrateur gobinjf.be http://www.gobinjf.be mailto:[EMAIL PROTECTED]
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
