topic Re: VPN - Rejected CCM_POST in SASE and Remote Access

VPN - Rejected CCM_POST

Neil_Davey — Mon, 22 Jan 2018 14:00:52 GMT

Hello

We use SCCM and when connected to the VPN we are seeing the attached error.

On checking my HTTP Methods policy, I am not blocking the POST command. Would anyone have any suggestions on this at all?

If we disable the HTTP Methods policy, then SCCM works ok via the VPN.

Thanks

Neil_Davey — Mon, 22 Jan 2018 14:31:49 GMT

I have come across this:

but as I have Take 216 already installed I guess this fix would already be on the Firewall?

PhoneBoy — Sat, 27 Jan 2018 07:10:14 GMT

CCM_POST is a different method than POST.

It appears the HTTP Method inspection setting will block unknown methods as well.

I recommend engaging with the TAC to see if there is a way to allow unknown ones: http://www.checkpoint.com/support-services/contact-support/index.html

Neil_Davey — Mon, 29 Jan 2018 10:28:05 GMT

Thanks Dameon, will look to log a support ticket for this one.