CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We've just added two more speakers!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 6/9, 7/14, 8/25, 10/6, 11/3, 12/8.
3. We have new forums in Portuguese and German (see below).
4. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
5. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Services
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-08-23
donshoutarp donshoutarp is offline
Member
 
Join Date: 2005-09-23
Posts: 74
donshoutarp has an average reputation (10+)
Default WCCP from branch office

I'm using R60 HFA4

I'm trying to uses WCCP to redirect http at a branch office to a URL filtering device at the main data center.

I'm not a WCCP expert, but it appears that the branch router encapuslates the packet from the branch PC to the URL filter. The URL filter processes the requests and sends the resluts back directly to the remote PC.

The firewall at the data center is seeing this as an out of state packet and dropping it.

Has anyone else gotten this to work?
Reply With Quote
  #2 (permalink)  
Old 2007-08-23
donshoutarp donshoutarp is offline
Member
 
Join Date: 2005-09-23
Posts: 74
donshoutarp has an average reputation (10+)
Default Re: WCCP from branch office

[quote=donshoutarp;20077]I'm using R60 HFA4


The firewall at the data center is seeing this as an out of state packet and dropping it.

QUOTE]

I should have said that the firewall is seeing the traffic as Spoofed. The URL filtering device is send the traffic back to the remote PC with the source as the public web site and the destination as the branch. The firewall sees the public address on an internal network and blocks the traffice as spoofed.
Reply With Quote
  #3 (permalink)  
Old 2007-08-27
RayPesek RayPesek is offline
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 835
RayPesek has an average reputation (10+)
Default Re: WCCP from branch office

What does WCCP stand for?

Ray
Reply With Quote
  #4 (permalink)  
Old 2007-08-27
BarryStiefel BarryStiefel is offline
Administrator
 
Join Date: 2005-08-11
Location: San Francisco, CA
Posts: 514
BarryStiefel has disabled reputation
Default Re: WCCP from branch office

Quote:
Originally Posted by RayPesek View Post
What does WCCP stand for?

Ray
"We Can't Connect Properly"
__________________
Barry J. Stiefel ("Stee-ful")
CCSA/CCSE/CCSE+/CCSI
President, CPUG
Reply With Quote
  #5 (permalink)  
Old 2007-08-28
mcnallym mcnallym is offline
Senior Member
 
Join Date: 2007-06-04
Posts: 805
mcnallym has an average reputation (10+)
Default Re: WCCP from branch office

It is Web Cache Communications Protocol and is a Cisco protocol for redirecting http traffic from there routers/firewall to a WCCP enabled content filtering system.

I have had it working but never through a Check Point firewall.
Reply With Quote
  #6 (permalink)  
Old 2007-08-28
RayPesek RayPesek is offline
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 835
RayPesek has an average reputation (10+)
Default Re: WCCP from branch office

Well, you can probably figure out how much help I can be on this one. :-)

Ray
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 10:52.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0