Re: [FW-1] Strange problem with Web access to an Access Point def ined in a DMZ lan

[admin@FW1-NOSPAMIAA.GOV.IL]

Title: RE: Re: [FW-1] Strange problem with Web access to an Access Point def ined in a DMZ lan

I have quite a few rules that use the security server (If you mean HTTP->CVP).

Mike

-----Original Message-----

From:   David Knoll [SMTP:david@UPBIT.CO.IL]

Sent:   à ôáøåàø 24 2002 9:21

To:     FW-1-MAILINGLIST@beethoven.us.checkpoint.com

Subject:             Re: [FW-1] Strange problem with Web access to an Access Point def             ined             in a DMZ lan

Do you have another rule where you use security server on that FW?

 

 

David Knoll
UpBIT Solutions Ltd


Tel:+ 972-3-6476387

Fax:+ 972-3-6476396

Cellular:+ 972-54-496357

 

E-mail: david@upbit.co.il

 

Upbit Solutions Ltd

9 Nissan Street

Tel-Aviv 69715, Israel

--------------------------------------------
This message may contain confidential and/or proprietary information, and is intended only for the person / entity to whom it was originally addressed. The content of this message may contain private views and opinions which do not constitute a formal disclosure or commitment unless specifically stated.






 

-----Original Message-----
From: Mailing list for discussion of Firewall-1 [mailto:FW-1-MAILINGLIST@beethoven.us.checkpoint.com] On Behalf Of admin@IAA.GOV.IL
Sent: Sunday, February 24, 2002 8:37 AM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: Re: [FW-1] Strange problem with Web access to an Access Point def ined in a DMZ lan



Gil,

The rule is without a security server setting, simply :

WS-Object   Access-Point-Group  Telnet+HTTP   Allow

The Telnet works, the HTTP returns the error I specified.

This happens even when accessing the Access Points by their IP addresses.

Mike

-----Original Message-----

From:   Gil Shulman [SMTP:Gils@PUBLICOM.CO.IL]

Sent:   ã ôáøåàø 20 2002 17:38

To:     FW-1-MAILINGLIST@beethoven.us.checkpoint.com

Subject:             Re: [FW-1] Strange problem with Web access to an Access Point def             ined             in a DMZ lan

Mike hi,

 

You should check if by any chance the HTTP security server is wrongly intercepting the connections.

 

Gil

-----Original Message-----
From: admin@IAA.GOV.IL [<mailto:admin@IAA.GOV.IL>]
Sent: Wednesday, February 20, 2002 4:26 PM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: [FW-1] Strange problem with Web access to an Access Point defined in a DMZ lan



Afternoon all,

I have a very odd situation here that I am unable to work out.

I have a setup as follows :

Internal Network

|

|

FW ---- Secured VLAN

|

|

Internet

On the secured VLAN I have a Lan dedicated only to Access Points.

I have a rule allowing specific users to access the AP's from the Internal Network using HTTP and Telnet.

The users can Telnet to the AP's fine.

The users attempt to access the AP's via HTTP. I see the sessions established in the log' and in the browser I get :

"FW-1 at fw: Failed to connect to the WWW server".

This again, despite the fact that I see the session established in the logs, and Telnet (standard) works fine.

Anyone have any idea what could be causing this ?

Thanks,




Mike Glassman

System & Security Admin

Computer & Information Systems

Israeli Airports Authority

Ben-Gurion Airport

<<http://www.ben-gurion-airport.co.il>>

Tel : 972-3-9710785

Fax : 972-3-9710939

Email : admin@iaa.gov.il

Usage of this email address or any email address at iaa.gov.il for the purpose of sales pitches, SPAM or any other such unwanted garbage, is illegal, and any person, whether corporate or alone doing so, will be prosecuted to the fullest possible extent.









**************************************************************************************************
The contents of this email and any attachments are confidential.
It is intended for the named recipient(s) only.
If you have received this email in error please notify the system manager or  the
sender immediately and do not disclose the contents to any one or make copies.

** eSafe scanned this email for viruses, vandals and malicious content **
**************************************************************************************************