[FW1] RE: HTTP URI + Websense

[misalert@FW1-NOSPAMcapitalfactors.com]

Title: RE: HTTP URI + Websense

Nope, not my problem.  My blockpage isn't the websense page regardless.  The links sometimes come up File not found (with AV's logo) and other just 404 errors.  I think it has something to do with Checkpoint's HTTP Security Server not handling the request properly.  Do you have this problem?  For instance (if you are behind a checkpoint wall with websense installed - or any URI resource preluding the rule you are using) go to this link and let me know if you get through!  If you do, then maybe my HTTP Security Server settings are messed up.

 

http://news.altavista.com/r/sc78//news/e?ei=2339488&ern=y

 

Jamie

-----Original Message-----
From: Hubbard, Dan [mailto:dhubbard@websense.com]
Sent: Tuesday, December 19, 2000 3:39 PM
To: MIS Security Alerts; fw-1-mailinglist@lists.us.checkpoint.com
Subject: RE: HTTP URI + Websense

My guess is that the machine running Websense does not have a resolvable name via DNS. Websense serves up its block page via HTTP and the URL is prefixed with the name of the machine.

Here is a link on our support site on howto fix this:

http://www.websense.com/support/platform/display.cfm?id=159

Let me know if this fixes this issue.

Then maybe you can tell me why this happens!  I just purchased "WebSense"
for Checkpoint.  I have created 3 rules.

1.  MyMachine   Any     Any     Accept  Long
2.  Any Any     forbidden->http Accept  Long  (WebSense Filter)
3.  Internal    Any     Any     Accept  Long

MyMachine has no problems browsing the links off of www.av.com (the news, entertainment links).  But anyone else on the Internal network can't hit only those links (gets page, file not found errors).  We have no other problems with the web.  I am game for any suggestions.

Jamie

-----Original Message-----
From: Dan Hubbard [mailto:dhubbard@netpart.com]
Sent: Monday, December 18, 2000 3:48 PM
To: fw-1-mailinglist@lists.us.checkpoint.com
Subject: [FW1] FW-1 + Websense SP3 update

FYI:

Today Checkpoint released Firewall-1 SP3 for version 4.1.

In the release notes you will find the following entries which directly
affect
Websense:

16. While using a UFP server, some of the packets were rejected on rule 0.
In
the log, the following reason
for rejection appeared: "Unknown error while trying to connect to UFP".
39. The HTTP Security Server daemon (ahttpd) used almost 100% of CPU on a
FireWall-1 machine.

Thanks

---------------------
Dan Hubbard
Websense Inc.
San Diego, CA

============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====

The information transmitted by the following E-Mail is intended only for the addressee and may contain confidential and/or privileged material. Any interception, review, retransmission, dissemination, or other use, or taking any action upon this information by persons or entities other than the intended recipient is prohibited by law and may subject them to criminal or civil liability. If you received this communication in error, please contact us immediately atext. 3600 and delete the communication from any computer or network system.

The information transmitted by the following E-Mail is intended only for the addressee and may contain confidential and/or privileged material. Any interception, review, retransmission, dissemination, or other use, or taking any action upon this information by persons or entities other than the intended recipient is prohibited by law and may subject them to criminal or civil liability. If you received this communication in error, please contact us immediately atext. 3600 and delete the communication from any computer or network system.