NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW-1] Checkpoint NG FP3 Dropping packets to Banking site


  • To: [email protected]
  • Subject: [FW-1] Checkpoint NG FP3 Dropping packets to Banking site
  • From: "NG, Alfred" <[email protected]>
  • Date: Wed, 26 Feb 2003 09:07:39 -0700
  • Importance: normal
  • Priority: normal
  • Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
  • Sender: Mailing list for discussion of Firewall-1 <[email protected]>
  • Thread-index: AcLdqJwkihqtABzNR5SC30riBOjzlwAB9Z8Q
  • Thread-topic: Checkpoint NG FP3 Dropping packets to Banking site

Hi everyone, we are having trouble currently with one banking site where
we are dropping packets outbound to a banking site.

Here is the line from Checkpoint:

Number:                 4738
Date:                   26Feb2003
Time:                   8:46:13
Product:                VPN-1 & FireWall-1
Interface:              eth-s1p2c0
Origin:                 vanaheim
Type:                   Log
Action:                 Reject
Service:                http
Source:                 pc-1033.apacorp.net
Destination:            CIBC_Business_Banking
Protocol:               tcp
Source Port:            2481
Information:            message_info: Line in HTTP request too long

Under SmartDefense there is the Http Security Server option settings and
we have it set to "Configurations  apply only to connections related to
resources used in the Rule Base"  and not to all connections. So this
Http Security server settings should not affect our firewall rules if we
are not using any "resources" in our rule base?
This problem seems to only occur with this banking site. We have a
stand-alone outside connection and when we test this site on the outside
machine not going through the checkpoint firewall things are fine.

Would anyone know of any fixes to try for this problem?

Sincerely,

>Alfred Ng
        Telecom Analyst
>Information Management Technology
>Alberta Pensions Administration
>3rd Flr, Park Plaza, 10611 - 98 Ave
>Tel:Fax:>E-Mail: [email protected]
>Web site: www.apaco.ab.ca
>

NOTE: THIS MESSAGE IS INTENDED ONLY FOR THE ADDRESSEE, IT MAY CONTAIN PRIVILEGED OR CONFIDENTIAL INFORMATION.
If you are not the intended recipient of this message, you should not: read it, distribute it, copy it or take any action in reliance on the content of this communication.  If you have received this communication in error, please notify us at once by reply E-mail, then permanently delete the original, your reply and destroy any copy or printout.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.