CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SmartDefense
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-02-18
Junior Member
 
Join Date: 2007-03-18
Posts: 3
Rep Power: 0
nzkiwi has an average reputation (10+)
Default What is this attack in SD

Hi
When I try to download a file over the web and the file is a msp type file the download timesout. The following is shown in Smartview Tracker.
Running R65.

What where in SD to fix it?

Number: 105254
Date: 19Feb2008
Time: 13:33:29
Product: SmartDefense
Interface: eth1
Origin: ebpcpfw_ext
Type: Log
Action: Drop
Protocol: tcp
Service: http (80)
Source: Raji
Destination: 61.8.212.115
Source Port: 1658
Attack: Content Protection Violation
Attack Information: Could not process packet
SmartDefense Profile: Default_Protection
Policy Info: Policy Name: 20080213_1
Created at: Wed Feb 13 17:13:39 2008
Installed from: whkmngmntcp

thanks
Reply With Quote
  #2 (permalink)  
Old 2008-02-21
Senior Member
 
Join Date: 2007-04-10
Location: India
Posts: 146
Rep Power: 2
gavvys has an average reputation (10+)
Send a message via Yahoo to gavvys
Default Re: What is this attack in SD

Hi,
There is a option called, "Perform Strict Enforcement", which enable to detect based on the content.You can enforce thie on JPEG,TIFF etc.

Disable this option in SD, I hope after that you can download the file.

Regards
Ranjit
Reply With Quote
  #3 (permalink)  
Old 2008-02-21
Junior Member
 
Join Date: 2007-03-18
Posts: 3
Rep Power: 0
nzkiwi has an average reputation (10+)
Default Re: What is this attack in SD

Hi
Thanks.
Do you know which one covers file type .msp This is a Windows Installer Patch file and not a paint bitmap file.

Is there a global setting for this or would I need to go thru each 'content prot' turning it off.

cheers
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 11:08.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0