topic Re: Https Inspection Not working in Firewall and Security Management

Https Inspection Not working

Ihenock1011 — Mon, 15 Jan 2024 06:54:31 GMT

Hi All,

We are using a security gateway with Check Point version R81.10 VSX, and on one of the VSX member gateways, we have enabled HTTPS inspection for selected user computers. The exported certificates from the Check Point gateway have been installed on these machines under trusted root certificates, and a rule base has been configured to inspect the traffic from these machines. However, upon reviewing the logs, we consistently encounter an error in the HTTPS Inspection blade stating, "Internal system error in HTTPS Inspection due to categorization service timeout," and it bypasses all traffic. Based on the log error, what could be the problem causing this issue?

Re: Https Inspection Not working

G_W_Albrecht — Mon, 15 Jan 2024 08:32:25 GMT

https://support.checkpoint.com/results/sk/sk176925

Re: Https Inspection Not working

Ihenock1011 — Thu, 25 Jan 2024 06:19:14 GMT

@G_W_Albrecht we configure the values based on the sk176925 however the error persists

the error is attached in the screenshot

Re: Https Inspection Not working

emmap — Thu, 25 Jan 2024 09:37:26 GMT

Does the virtual system have DNS and internet access? Is URL filtering enabled and otherwise working?

Re: Https Inspection Not working

Ihenock1011 — Fri, 02 Feb 2024 11:51:21 GMT

@emmapYes, the VS has set DNS and Internet access. URL filtering is also working okay.

Re: Https Inspection Not working

emmap — Mon, 05 Feb 2024 06:10:15 GMT

Might need a TAC case to debug the processes involved then.

Re: Https Inspection Not working

Ihenock1011 — Tue, 13 Feb 2024 08:45:45 GMT

Dear all, thank you for your valuable advice and help. I opened a TAC case, and after the engineer suggested granting internet access for the VSX, the error no longer exists, and HTTPS inspection is now working.