Smartdefense and GotoMeeting

[netsec]

Has anyone found a way to overcome Smartdefense's rejection of GotoMeeting traffic over http?

Number: 202025
Date: 18Jul2006
Time: 9:58:39
Product: SmartDefense
Attack Name: Malformed HTTP
Attack Information: WSE0020001 illegal header format detected: Malformed HTTP request
Interface: eth-s1p2c0
Origin: HQGate (x.x.x.x)
Type: Log
Action: Reject
Service: http (80)
Source: ericchange1 (x.x.x.x)
Destination: egw.gotomeeting.com (x.x.x.x)
Protocol: tcp
Source Port: 1228

[chillyjim]

For now you need to turn off the relevant protections.

Citrix has been informed but they haven't corrected the code yet. In a future release you will be able to mark web servers as know good and bypass the protection for that server.

[Coronabeer]

I get the same message for GoToAssist. I allow GoToMyPC and that worked until you get to the shared screen. Then I get..

Number: 522941
Date: 3Aug2006
Time: 14:39:10
Product: SmartDefense
Attack Name: Malformed HTTP
Attack Information: WSE0020001 illegal header format detected: Illegal start line in request
Interface: eth2c0
Origin: N (X.X.X.X)
Type: Log
Action: Reject
Service: http (80)
Source: X.X.X.X
Destination: X.X.X.X
Protocol: tcp
Source Port: 1453
Information: reason: M

I saw the reply on by chillijim on "relevant protections" where is that?

[kva.kva]

http://www.cpug.org/forums/search.php?searchid=66635
Search in the forum by "WSE0020001"

[tpearson]

Alternatively, you could allow 'GoToMyPc' port out (8200) goToMeeting uses the same port and tries them first.