I have seen this problem as well when accessing yahoo's website/attachments, downloading patches from sun's http's and various other problems.
Solution: asm.C - section HTTP_security_server :http_max_header_length (2100) :http_max_request_url_length (2048) Objects.C and Objects_5_0.C - section :props (firewall_properties :http_allow_content_disposition (true) Have never had a problem since. L8r > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED]]On Behalf Of Adams, > Tim > Sent: Thursday, January 23, 2003 10:20 AM > To: [EMAIL PROTECTED] > Subject: [FW-1] Websense 4.4 > > > There is a problem with the HTTP security server in NG FP3 that > causes this > problem. I currently have a case open with Checkpoint on this > issue. As a > workaround, install Hotfix 1 for FP3 and increase the "Maximum HTTP Header > Length" setting in SmartDefense (under HTTP->HTTP Security Server->HTTP > Format Sizes). I have found that a setting of 8192 has eliminated all of > the "Page Cannot be Displayed" errors and all Reject entries in the logs > with the error "reason: Header exceeded max_header_length" for sites that > have large HTTP header payloads. > _________________________ > Tim Adams > LAN Administrator > Scripps Information Services > > -----Original Message----- > Date: Wed, 22 Jan 2003 17:56:00 +0100 > From: Claudia Gnecchi <[EMAIL PROTECTED]> > Subject: Websense 4.4 > > I have the same problem also with websense 4.4.1: any solution? > Thank You > > Claudia > > -----Messaggio originale----- > Da: Bruno Nilo Santiago Silva [mailto:[EMAIL PROTECTED]] > Inviato: marted=EC 19 novembre 2002 17.34 > A: [EMAIL PROTECTED] > Oggetto: [FW-1] RES: [FW-1] Websense 4.4 > > Any solution for this problem? > > -----Mensagem original----- > De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]=20 > Enviada em: quinta-feira, 24 de outubro de 2002 20:40 > Para: [EMAIL PROTECTED] > Assunto: Re: [FW-1] Websense 4.4 > > Bruno, > > Well, I can tell you that the problem is not with Websense. This > problem can be replicated by using a Wildcard HTTP Resource instead of > using the Websense HTTP Resource (which doesn't send the information to > Websense at all, but still uses the HTTP Security Server), so it must be > a known bug in the HTTP Security Server. We have had a number of our = > customers call with the same problem in FP3, and we tell them to contact > their FireWall-1 support staff to see if there is a solution yet for > this problem. > > Has anyone on the list gotten a hotfix for this problem in FP3? > > -----Original Message----- > From: Bruno Nilo Santiago Silva [mailto:[EMAIL PROTECTED]] > Sent: Thursday, October 24, 2002 1:11 PM > To: [EMAIL PROTECTED] > Subject: [FW-1] Websense 4.4 > > To whom it may concern, > > I am having problems with websense and security server. My Websense > Version is 4.4 ns my FW-1 is NG FP3 on SecurePlatform. The CPU > utilization is about 3% per processor. When I access attachments on > webmail sites (yahoomail), or authentication on other webmail sites > (hotmail) browsers reply that page cannot be found... I think the > problem is on ASP pages access... Anyone know something about this > issue? > > Thank You, > > Bruno > > "Scripps Information Security" > ------------------------------------------------------------------ > ------------ > This e-mail and any files transmitted with it may contain > privileged and confidential information and are intended solely > for the use of the individual or entity to which they are > addressed. If you are not the intended recipient or the person > responsible for delivering the e-mail to the intended recipient, > you are hereby notified that any dissemination or copying of this > e-mail or any of its attachment(s) is strictly prohibited. If you > have received this e-mail in error, please immediately notify the > sending individual or entity by e-mail and permanently delete the > original e-mail and attachment(s) from your computer system. > Thank you for your cooperation. > > > > ================================================================== > ============ > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
