Actually, I did not open a ticket considering this is a well known issue affecting many SSL VPN solutions...
I'm following up with local Check Point SE once in a while, but was not aware of any hotfixes so far..I didn't know R75.20 was affected too. Their official answer so far was to remove patch form workstation and activate the IPS protection form Nov 2011. Please keep us posted about the hotfix developments for earlier versions if you hear anything. cheers, Charles ________________________________________ From: Mailing list for discussion of Firewall-1 [FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM] On Behalf Of Ray [sixsigm...@hotmail.com] Sent: February 4, 2012 12:59 PM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: Re: [FW-1] KB2585542 vs SNX Have you opened a case with Check Point yet? They have developed a hotfix for R75.20 and were working to backport it to earlier versions. I do not know what that progress is. It's not just Check Point products that are affected. It's breaking other vendor's SSL VPN systems as well. Ray > Date: Fri, 3 Feb 2012 08:22:52 -0800 > From: cprev...@gosecure.ca > Subject: [FW-1] KB2585542 vs SNX > To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM > > Hey guys, > > What's your experience so far with KB2585542 breaking SNX? > > We have seen issues with R65 and R70 so far .. but the results we see don't > seem to be constant. > > Current workarounds that we know of so far would be : > > - remove hotfix ( duh ) > > - use a real browser instead of IE9 > > - enable RC4 support in Global Props ==> RA ==> SSL Network Extender > > Just curious to see what your experience is .. > > Regards, > Charles > > Charles-Etienne Prévost > Analyste en sécurité de l'information > Information Security Analyst > GoSecure Inc. > > O: 514.287.7427 x242 > F: 514.287.9734 > 24/7 Urgences: 1.888.287.5858 > > Experts en sécurité de l'information > The Trusted Experts in Information Security > http://www.gosecure.ca<http://www.gosecure.ca/> > > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to lists...@amadeus.us.checkpoint.com > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > fw-1-ow...@ts.checkpoint.com > ================================================= > > Scanned by Check Point Total Security Gateway. Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to lists...@amadeus.us.checkpoint.com in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email fw-1-ow...@ts.checkpoint.com ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to lists...@amadeus.us.checkpoint.com in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email fw-1-ow...@ts.checkpoint.com =================================================
