It is a flaw with
the HTTP Security Server in FW-1.
Open the Policy
Editor
Click Manage
-> Resources
Double-click on
your URI resources that represents Websense
Click the Match
tab
On UFP Caching
Control select "VPN-1 & Firewall-1 (one request)"
Click
OK
Click
Close
Save and install
the policy
It's my
understanding that this will affect your Websense logging but I haven't been
able to verify that without a doubt.
Good
Luck,
Paul Mills Check Point Certified (CCSA,
CCSE) Information Security Analyst
I've
run into a problem trying to update our internal LAN PC's to Microsoft's
Update site when using the Websense software. Removing all restrictions on the
Websense package still prevents updates and can only be accomplished by
opening the internal network rule on the firewall to http
anywhere.
I've
been told by a Websense techie that the FW1 isn't passing the entire
instruction back to the Microsoft server and it hangs waiting for the rest
before beginning to download.
If
this has been discussed before, I apologize but would appreciate any help from
anyone that has solved this problem.
Thanks
in advance,
RT
Collins
Oak
Park, Illinois
|