CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Web Security > Web Intelligence
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-02-28
Junior Member
 
Join Date: 2006-10-08
Posts: 15
Rep Power: 0
goldie has an average reputation (10+)
Default Messagelabs proxy protocol blocked by web intelligence

Hi guys,

I am having problems getting 'client site proxy' for ISA server 2006 to work

Client site proxy is an ISA server add in which points all proxy traffic upstream to a messagelabs proxy server.

It does work for http requests but for some reason smart defence is blocking https requests with the following errors:

WSE0020001 illegal header format detected: Illegal start line in request

and

message_info: Retransmitted data does not match original data

it seems to be something in web intelligence that is blocking it. I have tried disabling all features relating to http format etc but to no avail

Does anybody have any ideas?!

Many thanks

Richard
Reply With Quote
  #2 (permalink)  
Old 2008-02-28
Senior Member
 
Join Date: 2006-01-25
Posts: 920
Rep Power: 3
melipla has an average reputation (10+)
Default Re: Messagelabs proxy protocol blocked by web intelligence

Quote:
Originally Posted by goldie View Post
WSE0020001 illegal header format detected: Illegal start line in request
I've found the following SMDF checks to cause the WSE0020001 error.

Web Int -> HTTP Protocol Inspection -> all checkboxes
Web Int -> Application Layer -> All checks
App Int -> Peer to Peer -> all sub items that have "Block Masquerading over HTTP protocol"

Its unfortunate that the header check is so poorly written, it essentially makes these SMDF checks unusable.
__________________
Its all in the documentation.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 00:40.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0