I wasn't able to find a solution, wether in the CP Knowledge Base (with more
than public level right's) nor in the Nokia Knowledge Base...
I can confirm (on another firewall-cluster with Solaris 8 on Sun Fire V440)
that the firewall modules must be HFA-13 to work with OWA-attachments.
SmartCenter can be on HFA-16, OWA still works then.
Is there a bug in HFA-16 concerning the SmartDefense Worm Catcher? I know that
HFA-16 includes some updates for SmartDefense, but in the Rel Notes you can't
find anything about this (only in HFA-07 about better logging of this reject in
SmartView Tracker).
best regards, felipe
-----Ursprüngliche Nachricht-----
Von: Mailing list for discussion of Firewall-1 [mailto:FW-1-MAILINGLIST AT
AMADEUS.US.CHECKPOINT DOT COM] Im Auftrag von Quick, Richard A.
Gesendet: Dienstag, 27. September 2005 16:24
An: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Betreff: Re: [FW-1] SmartDefense Worm Catcher
I had this same issue with HFA-05/3.81 for IPSO and had to fallback to
HFA-03. I was running HFA-16 on the management box though.
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of felipe
gonzales
Sent: Tuesday, September 27, 2005 10:08 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] SmartDefense Worm Catcher
Hi all
We are using NG AI R55 HFA-16 (management and firewall module on the
same system). After applying HFA-16 we have problems attaching files in
Outlook Web Access.
Small attachments (<100k) are working well, larger attachments (>100k)
are causing a http 400 error (bad request / request is badly formed ) on
the OWA client. SmartView Tracker shows a http-Reject between the
OWA-Server (located in the DMZ) and the Exchange Server (located in the
Intranet). The information field shows "Illegal LF-CR combination in
HTTP header".
With HFA-13 all is fine. When disabling the General HTTP Worm Catcher in
SmartDefense (SmartDefense is up to date) we can attach files without
problems (see also Check Points sk26084. Also tested is sk11732).
Disabling the Worm Catcher is no solution for us....
Any ideas? Thanks!
Best Regards,
felipe
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
