Hi Dennis,
It's a new installation and unfortunately https is already defined as ENC-HTTP.
I also tried to set "None" but same result.
Thank you for your help.

Dennis Breithaupt ha scritto:
Hello,

[...]
Attack Name:               Malformed HTTP
Information:                  reason: €L^A^C
Attack Information: WSE0020001 illegal header format detected: Illegal start line in request
[...]

Why HTTPS traffic is interpreted as HTTP?
Any idea on how to insert this traffic as "legal" and not have-it blocked?

Thank-you for your help.
Roberto.

we've had the same problem. The Service type "https" was defined as "Protocol Type" "HTTP", but should have been "ENC-HTTP" in the "Advanced TCP Service Properties".

Have you upgraded to NGX just shortly? We experienced the above issue after upgrading from a pre-NGX version. It seemed that our service definitions where unprecise before, creating this issue just after upgrading...


Regards,

Dennis

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================



=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to