RE: [FW1] Unknown WWW Server

["Adams, Gavin" <gadams@FW1-NOSPAMpromisant.com>]

Mike/Tom,

I glad that you raised that problem, and even more glad that Tom answered
it. I just saw this same problem with some people going to an OWA server.

They could get to the ugly Exchange login screen, authenticate, pull up the
inbox, etc. But when they went to read or compose messages, only part of the
page would load in the browser. Forcing HTTP 1.1 to 1.0 did the trick.

Technically, no CVP being used, just the HTTP security server with wildcards
to log URL's. FYI, 4.1 SP2 in use.

Regards,

--- Gavin

 -----Original Message-----
From: 	Chilton Tim [mailto:tim.chilton@capco.com] 
Sent:	Wednesday, October 04, 2000 05:13
To:	fw-1-mailinglist@lists.us.checkpoint.com; manning@europe.chep.com
Subject:	RE: [FW1] Unknown WWW Server


Mike,

I too had problems with google.com, I guess that you are using a CVP server
too ?

The problem is that HTTP 1.1 doesn't work properly with a CVP, Checkpoint
are aware of this issue - that is they knew about the issue when I logged
the call.

Two solutions exist (One from Trend Micro and one from Checkpoint)

1. Disable HTTP 1.1 in your browser (Trend - to show the issue)
	Properties
	Advanced
	HTTP 1.1 settings
	[  ] Use HTTP 1.1
	Quit the browser
	Chant the magic words (work you b*****d)
	Restart the browser

This has the problem that with a large user base it's obviously not
pracical.

2. Fix the firewall
	Close the management GUI and log viewer
	stop the firewall using "fwstop"
	open conf/objects.c on the management station
	After the :props line
	add 
	: http_force_down_to_10 (true)
	Restart the firewall with "fwstart"

Note that if the firewall is not stopped or the UI's are open then I had
issues with the updates being lost or the changes not acivating. - I later
found that this behaviour this documented on www.phoneboy.com

I've also not had any further issues (that seem to relate to this) since
implementing the fix.

Regards

Tim

-----Original Message-----
From: Mike Anning [mailto:manning@europe.chep.com]
Sent: 27 September 2000 11:30
To: fw-1-mailinglist@lists.us.checkpoint.com
Subject: [FW1] Unknown WWW Server





I am still having problems with this error message when attemtping to access
certain web sites through our Nokia, http://www.google.com is one good
example.
Running IP 440 with V4.0 SP5 IPSO 3.1.2 and Websense 3.12.

I have tried the objects.C modifications in Nokia Resloution 3043 and also
checked that ahttpd.log does not exceed 1Mb by removing it and restarting
the
Firewall.

I have also set 2 security servers to run in fwauthd.conf in a vain attempt
at
making it work.

Is there anyone out there who has found a solution to this problem?

Many thanks in advance.

************************************************************************
The information in this email is confidential and is intended solely
for the addressee(s).
Access to this email by anyone else is unauthorised. If you are not
an intended recipient, you must not read, use or disseminate the
information contained in the email.
Any views expressed in this message are those of the individual sender,
except where the sender specifically states them to be the views of
The Capital Markets Company.

http://www.capco.com
***********************************************************************



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================