Hi,
Dennis Breithaupt ha scritto:
Hi,
- is a proxy involved in the communication or is it direct
client-server communication?
No proxy involved
- which Rule No is matching? Rule "0" or the particular HTTPS-access
rule?
No rule matching is a SmarDefence alarm
I think the question is, if there is a global SmartDefense rule
matching or if it's your access rule. But if you set the protocol
enforcement to "None" in the access-rule without any change in the
behaviour, I think you have to verify the global configuration options
of SD.
The problem disappers when I turn off all the WebIntelligence options
... (but in this way I'm not protected...)
Regards,
Dennis
Roberto Lauriola schrieb:
Hi Dennis,
It's a new installation and unfortunately https is already defined as
ENC-HTTP.
I also tried to set "None" but same result.
Thank you for your help.
Dennis Breithaupt ha scritto:
Hello,
[...]
Attack Name: Malformed HTTP
Information: reason: €L^A^C
Attack Information: WSE0020001 illegal header format detected:
Illegal start line in request
[...]
Why HTTPS traffic is interpreted as HTTP?
Any idea on how to insert this traffic as "legal" and not have-it
blocked?
Thank-you for your help.
Roberto.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
