CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 2 of 2

Thread: Attack: General Notice

  1. #1
    Join Date
    2013-10-08
    Posts
    9
    Rep Power
    0

    Default Attack: General Notice

    Dear all,

    Current I have a case that I can not know how to process so far?

    I am using CheckPoint 4200 appliance as web gateway (proxy-nontransparent), I confirmed that IPS software blade already is disable.
    But when my client try to access the website, some CPAS or picture can not load.

    Tracking on log as the attached file. There is the reject action with attack General Notice as IPS software Blade.
    Show in capture.png, client issue show in capture1.png (test on IE ,FF, Chrome web browser)

    Try to sk121533 but no more information due to i can make sure network/routing/dns are working well

    Appreciate your advice .

    Thanks
    Flexible
    Attached Thumbnails Attached Thumbnails Click image for larger version. 

Name:	Capture.PNG 
Views:	21 
Size:	64.6 KB 
ID:	1357   Click image for larger version. 

Name:	Capture1.PNG 
Views:	12 
Size:	54.1 KB 
ID:	1358  

  2. #2
    Join Date
    2012-07-19
    Posts
    93
    Rep Power
    6

    Default Re: Attack: General Notice

    There's nothing wrong.

    The Gateway could not connect to https://a.tiscali.co.uk (I checked, and I can't connect to that as well) and the result is the log line you are seeing.

    Using developer tools in my browser I can confirm that a.tiscali.co.uk does not respond to a subrequest. And I'm not using a proxy at all.

    See sk110013, section "Proxy errors"

Similar Threads

  1. End of Sale Notice for Safe@Office, UTM-1 EDGE, and SG80
    By PhoneBoy in forum Check Point Release Notifications
    Replies: 0
    Last Post: 2014-07-23, 16:16
  2. TCP Syn Attack
    By lassaad.toukabri in forum VPN-1 VSX
    Replies: 0
    Last Post: 2011-11-03, 04:07
  3. What is this attack in SD
    By nzkiwi in forum IPS Blade (Formerly SmartDefense)
    Replies: 2
    Last Post: 2008-02-21, 19:21
  4. ATTACK by Connections
    By switzer in forum IPsec VPN Blade (Virtual Private Networks)
    Replies: 0
    Last Post: 2007-11-05, 12:57
  5. Empty ACK Attack?
    By opnsgreg in forum Miscellaneous
    Replies: 1
    Last Post: 2007-10-19, 03:47

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •