topic Re: Unable to download PDF's when using Check Point HTTP/S Proxy in Firewall and Security Management

Unable to download PDF's when using Check Point HTTP/S Proxy

danielnfletcher — Mon, 22 Feb 2021 15:31:19 GMT

Afternoon,

we have recently enabled the HTTP/S proxy functionality of our Check Point 6400 gateway running R80.40 T89, and have encountered an issue with downloading PDF files over 100K.

Has anyone else encountered this issue? We dont appear to be able to identify an obvious cause in our logs.

Thanks

Dan

Re: Unable to download PDF's when using Check Point HTTP/S Proxy

PhoneBoy — Sun, 28 Feb 2021 18:33:20 GMT

There is a limit to the file sizes processed by Threat Emulation/Extraction.
However, you should be able to configure what happens when this limit is exceeded (the file is allowed or blocked).
Believe this is done in the Threat Prevention profile.

Re: Unable to download PDF's when using Check Point HTTP/S Proxy

Vincent_Bacher — Sun, 28 Feb 2021 21:14:43 GMT

In the past we used to recommend not using a CP gateway as explicit proxy and better use a so developed proxy such as Bluecoat 🙂

Re: Unable to download PDF's when using Check Point HTTP/S Proxy

danielnfletcher — Tue, 30 Mar 2021 08:12:25 GMT

Thanks PhoneBoy, we decided to raise this issue with TAC and they are working with R&D to get to the bottom of the cause.