Yes, we had this same issue.
The only workaround we found was to change smart defense to monitor mode
or to change the http service protocol type to none under the advanced
properties. However, If it is set to none it disables http content
inspection.
Regards,
John
>>> jmorrill AT ANDOVER DOT EDU 06/30/06 11:18 AM >>>
Has anyone else had trouble with GotoMeeting.com from behind a
checkpoint firewall? I can't seem to get it to work and I am seeing the
drops in SmartView Tracker with the following SmartDefense errors but I
am not sure what I need to disable to get this to work.
Product: SmartDefense
Type: Log
Action: Reject
Protocol: tcp
Service: http (80)
Destination: egw.gotomeeting.com (216.115.208.199)
Source Port: 1635
Attack Name: Malformed HTTP
Attack Information: WSE0020001 illegal header format detected:
Illegal start line in request
Information: reason: ^V^C^A
Product: SmartDefense
Type: Log
Action: Reject
Protocol: tcp
Service: http (80)
Destination: egw.gotomeeting.com (216.115.208.199)
Source Port: 1639
Attack Name: Malformed HTTP
Attack Information: Illegal LF-CR combination in HTTP header
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
