topic Re: no header when accessing via checkpoint in Firewall and Security Management

no header when accessing via checkpoint

Arturxr — Tue, 31 Jan 2023 09:43:40 GMT

When we go to the http resource on port 8080, in the browser debug we notice that there is no HEAD header. In the case where we bypass CheckPoint, the HEAD header appears.

Because of the absence of this header, we don't see the video image when accessing from a PC.
When accessing from an IPAD, we can't even authenticate to the resource, at which time we see a blank screen when we try to log in through the app.

We assume that all of the problems are due to the fact that we are not getting a HEAD header through CheckPoint. The client cannot automatically get the HEAD header.

We did manage to copy the header itself though, while we were checking for access bypassing CheckPoint. After that, we connected to the network behind CheckPoint and navigated to the header in the browser and were able to get the image.

Re: no header when accessing via checkpoint

G_W_Albrecht — Tue, 31 Jan 2023 09:55:25 GMT

Contact TAC to get this resolved quickly !

I remember another post with a similar issue in the last days: https://community.checkpoint.com/t5/Security-Gateways/there-is-no-video-image-from-the-video-recorder-when-traffic/m-p/168690#M30509

This is also from you and has the same issue, but instead of replying there you created a new post - why that ??? Not helpfull...

Re: no header when accessing via checkpoint

Chris_Atkinson — Tue, 31 Jan 2023 11:51:21 GMT

Which version/JHF, what blades are enabled?

Is the gateway working/configured as a proxy?

Do you have non-standard configuration for IPS protections such as:

Re: no header when accessing via checkpoint

Arturxr — Tue, 31 Jan 2023 13:48:17 GMT

Which version/JHF, what blades are enabled? - 81.10, Take 66, firewall, mab, app control, url f, IA, monitoring, ips ab and av

Is the gateway working/configured as a proxy? - NO

Do you have non-standard configuration for IPS protections such as: - NO

Re: no header when accessing via checkpoint

PhoneBoy — Wed, 01 Feb 2023 02:53:59 GMT

Try: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111579&partition=Advanced&product=IPS

Re: no header when accessing via checkpoint

the_rock — Wed, 01 Feb 2023 03:54:51 GMT

I believe sk @PhoneBoy gave is your best bet.

Re: no header when accessing via checkpoint

Arturxr — Thu, 02 Feb 2023 08:19:08 GMT

That didn't solve our problem

Re: no header when accessing via checkpoint

Chris_Atkinson — Thu, 02 Feb 2023 08:38:36 GMT

Recommend investigating further with TAC in that case.

Anything you can share with them about exceptions you've tested / trialed will also help.