NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] HTTP, HTTPS, and FW-1



     In practice, it is best to allow HTTP also to your domain and then use
a redirector to use HTTPS page.  People who may still have a valid HTTP link
will be redirected to the new URL. I would recommend reducing the standard 5
second wait. This is annoying also to users who frequently visit the URL.
Company employees can become annoyed quickly over the "S" in HTTPS.

-----Original Message-----
From: Luis Aguilera [mailto:[email protected]]
Sent: Tuesday, April 23, 2002 9:51 AM
To: [email protected]
Subject: [FW-1] HTTP, HTTPS, and FW-1


Hello everyone,
have an esoteric question.

We have an apache webserver. This server has been accessible to the world
with http. I recently acquired an ssl certificate and I'm now forcing all
traffic to use https.
To do this, I simply changed the FW rule to accept traffic only from the
https service.

It all works fine, except for one thing.

If you go to the url https://hostname.ourcompany.com it works great.
However, if you go to http://hostname.ourcompany.com you will eventually get
a "page cannot be displayed... cannot find server or DNS error". The FW logs
correctly show the http packet being dropped.

Now, I've done a little research and found that error 403-4.htm (in IE)
instructs the user to enter httpS://... as the url.

Does any now how I can get FW-1 to respond back with a specific html error?

thanks

Luis Aguilera
IT Manager
BaseSix

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.