CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 72 attendees signed up from 20 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SmartDefense
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-10-31
stafi stafi is offline
Junior Member
 
Join Date: 2005-11-04
Posts: 2
Rep Power: 0
stafi has an average reputation (10+)
Default valid site blocked

i had a prob with a certain site. when a user try to browse to the site
it hangs and will not come up than on other times it will work good.
this site is https . i checked with the fw admin and he say that the
smart defence logs show that this site is sometimes blocked.

how can i put this site in smart defence as trusted ?
Reply With Quote
  #2 (permalink)  
Old 2006-10-31
northlandboy northlandboy is offline
Senior Member
 
Join Date: 2006-07-28
Location: New Zealand
Posts: 786
Rep Power: 3
northlandboy has an average reputation (10+)
Default Re: valid site blocked

Smart Defense doesn't really have that sort of granularity. R62 introduces some newer stuff with profiles that can help a bit, but you can't really make exceptions for specific sites (actually I can probably think of a way of bypassing all protections for specific destinations, but you don't want to go down that path).

Look at what SD check is triggering the block, and decide what the risk is of disabling that check.
Reply With Quote
  #3 (permalink)  
Old 2006-10-31
chillyjim chillyjim is offline
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,632
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: valid site blocked

Quote:
Originally Posted by northlandboy View Post
Smart Defense doesn't really have that sort of granularity. R62 introduces some newer stuff with profiles that can help a bit, but you can't really make exceptions for specific sites
R62 from what I am told adds the infrastructure to do this, but it is not yet in the code. please open an RFE (http://www.checkpoint.com/jsp/rfe/rfe.jsp) for this. The more folks that do the better.

Quote:
(actually I can probably think of a way of bypassing all protections for specific destinations, but you don't want to go down that path).
I've been told that support can have custom inspect code writen to allow a given site to bypass the SMDF inspection, but I've never tried to have it done.

Quote:
Look at what SD check is triggering the block, and decide what the risk is of disabling that check.
Or tell the website to fix thier code :)
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 11:48.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0