hi
I had to deactivate "malformed PNG" (content inspection) to make it work,
DONT ASK! :-/
Regards
rainer
--
Rainer Orsario, Technical Services / IT-Sicherheit
Bacher Systems EDV GmbH
Clemens-Holzmeister-Strasse 4
A-1100 Wien, Business Park Vienna
phone: +43 (1) 60 126-34 | fax: +43 (1) 60 126-4
e-mail: ro AT bacher DOT at | http://www.bacher.at
-----Ursprüngliche Nachricht-----
Von: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] Im Auftrag von
cisco4ng
Gesendet: Mittwoch, 31. August 2005 04:15
An: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Betreff: Re: [FW-1] SmartDefense and Java-based webpage
Wichtigkeit: Niedrig
I've seen it before. I had to disable http worm catcher in SmartDefense.
After that, downloading large .jar file worked for me. The weird thing is
that you won't see any drops in SmatrtDefense.
Good luck!
Patrick Kelly <pkelly AT PCROCK DOT NET> wrote:
I have NGAI on SPLAT with HFA 15. I need to get users to a webpage that
contains a java-based application. The application downloads large (2MB and
less) .jar files as part of a simulation and training application.
tcpdump at the external shows the http request going from internal to the ip
address of the website. The return traffic from the website goes to NAT
address and high port number. The log shows that the internal client goes
out to port 80 but the source is incremented by 1 for the entire time the
application fails. The vendor thinks there is a problem with my ability to
download the .jar files. However, this has not and is not a problem now or
in the past. Even their test site checks out okay for a small .jar file. If
I take an imaged client outside the FW, everything runs just fine.
Has anyone run into this problem? There are no log entries for a
SmartDefense failure, reject or deny.
Thanks in advance for your interest,
Patrick Kelly
=================================================
To set vacation, Out-Of-Office, or away messages, send an email to
LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
=================================================
To set vacation, Out-Of-Office, or away messages, send an email to
LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
