You could try:-
Re-enable the worm catcher
Create a new http service and call it http_none, in advanced for this service
change protocol type to none
Creating a new rule onnly for this connection ie internal -> appliaction site ->
http_none
All other http traffic must be matched on another rule so you still have the
smartdefense functionality
It is a workaround but give it a go
JP
Quoting "Luna, Cesar" <Cesar.Luna AT PS DOT NET>:
> Hello,
>
> I am seeing the following error message in the log viewer when internal
> users are trying to access an application on the internet:
>
> message_info: Illegal LF-CR combination in http header
>
> NG R55 hfa_17
>
> Solution ID: #sk31267 - This article talks about the problem being after
> upgrading to hfa_16. Firewalls are running
> hfa_17. 2nd option is to disable 'http worm catcher'
>
> We disabled the worm catcher and that resolved the problem.
>
> Is there anything else that we can do besides disabling the worm
> catcher?
>
> Thanks,
>
> Cesar Luna
> PerotSystems
> 2300 W. Plano Parkway
> Phone: 972-577-6557
>
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
