Hi,
is it solved yet? I had the same logs in R55W and now in R60. I did a long 
search about a year ago and found nothing. Since noone here complained about 
anything malfunctioning I stopped researching this issue. Still interested 
tough...

----- Ursprüngliche Mail ----
Von: Roberto Lauriola <[EMAIL PROTECTED]>
An: [email protected]
Gesendet: Mittwoch, den 14. Juni 2006, 12:35:56 Uhr
Betreff: Re: [FW-1] Malformed HTTP

Hi,

Dennis Breithaupt ha scritto:
> Hi,
>
> - is a proxy involved in the communication or is it direct 
> client-server communication?
No proxy involved
>
> - which Rule No is matching? Rule "0" or the particular HTTPS-access 
> rule? 
No rule matching is a SmarDefence alarm

> I think the question is, if there is a global SmartDefense rule 
> matching or if it's your access rule. But if you set the protocol 
> enforcement to "None" in the access-rule without any change in the 
> behaviour, I think you have to verify the global configuration options 
> of SD.
The problem disappers when I turn off all the WebIntelligence options 
... (but in this way I'm not protected...)
>
> Regards,
> Dennis
>
> Roberto Lauriola schrieb:
>> Hi Dennis,
>> It's a new installation and unfortunately https is already defined as 
>> ENC-HTTP.
>> I also tried to set "None" but same result.
>> Thank you for your help.
>>
>> Dennis Breithaupt ha scritto:
>>> Hello,
>>>
>>> [...]
>>>> Attack Name:               Malformed HTTP
>>>> Information:                  reason: €L^A^C
>>>> Attack Information:      WSE0020001 illegal header format detected: 
>>>> Illegal start line in request
>>> [...]
>>>>
>>>> Why HTTPS traffic is interpreted as HTTP?
>>>> Any idea on how to insert this traffic as "legal" and not have-it 
>>>> blocked?
>>>>
>>>> Thank-you for your help.
>>>> Roberto.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to