[FW1] http proxy

["Mike Anning" <manning@FW1-NOSPAMeurope.chep.com>]

Could someone please offer some advice here.

Nokia 440 with IPSO 3.2.1 and CHKP V4 SP4 running Websense.

Firewall is configured as proxy for IE5 clients to browse the web most of the
time works OK.
Some addresses work spordaically and I don't know why...

There is one good example, http://www.google.com which is a CNAME record for
google.lb.google.com.
When www.google.com is entered in the address field in IE, the FW-1 Unknown WWW
Server error is returned... but it is returned too quickly for the Firewall to
be performing a proper DNS lookup.
When you enter google.lb.google.com, the site is displayed properly but as soon
as any of the links are used (which link to www.google.com) the FW-1 error
appears again.
Also, if I enter the IP address this works also (64.209.200.100)... until you
hit a link.

Is the Firewall caching bad lookup info and of so how do I clear this down and
stop it from happening?
I know the site is valid because it works over dialup.

Any help would be appreciated.

Cheers

Mike

---------------------------------------------------------------------------------
DISCLAIMER:
This E-mail is strictly confidential and intended solely for the addressee.
It may contain information that is covered by legal, professional or other
privilege. If you are not the intended addressee you must not use, disclose or
copy this transmission.

This E-mail is not intended to impose nor shall it be construed as imposing any
legally binding obligation upon CHEP and/or any of its subsidiaries or
associated companies.

Neither CHEP nor any of its subsidiaries or associated companies gives any
representation or warranty as to the accuracy or completeness of the contents of
this E-mail.

CHEP shall not be held liable to any person resulting from the use of any
information contained in this E-mail and shall not be liable to any person who
acts or omits to do anything in reliance upon it.




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================