topic Re: Reverse Proxy dest path in SASE and Remote Access

Reverse Proxy dest path

Oryx — Thu, 04 Apr 2024 19:37:03 GMT

Hi,

I'm running R81.20, JHF take53 and I'm trying to use the ReverseProxy feature.

Everything seems to be working fine, except the <path dest="destpath"/> attribute. When I try to config the dest on the xml file and I run the ReverseProxyCLI apply config, that config is just removed from the file.

I've tried many times wih different rules and it's always the same result. Do you know if this is an expected behaviour or if there are any kind of issue with this particular attribute on this Take?

Thanks in advance,

César Santos

Re: Reverse Proxy dest path

Lesley — Thu, 04 Apr 2024 21:09:47 GMT

How does the XML look any mistakes building it? (coding error)

<allowedPaths>
            <path source="sourcepath"/>
            <path dest="destpath"/>
        </allowedPaths>

The allowedPaths define the resources to be reached on the site.
The attribute <path source=...> holds the path to which it is mapped.
The attribute <path dest=...> defines the path to which it is mapped.
You can define multiple paths on the same rule.
If <path source=...> is not defined, then the default source is root ( / ).
If the <path dest=...> is not defined, then it is the same as the source.

Re: Reverse Proxy dest path

Oryx — Fri, 05 Apr 2024 11:12:45 GMT

Hi,

I'm not getting any error when I run the ReverseProxyCli apply config. So, this is a snippet of my ReverseProxyConfig.xml file with the attributte dest properly defined.

Then I apply the config. I'm not getting any kind of errors on the output.

Then, when I cat the file, I'me getting this.

So the dest attribute just got eliminated somehow. I did not find anything on the doc about this behaviour.

Kind regards,

César Santos

Re: Reverse Proxy dest path

the_rock — Fri, 05 Apr 2024 12:31:32 GMT

Same here, just tested on R81.20 jumbo 51 lab fws, works fine.

Andy

Re: Reverse Proxy dest path

Oryx — Mon, 08 Apr 2024 10:24:28 GMT

So, issue with take53, right?

César

Re: Reverse Proxy dest path

ajsingh — Thu, 11 Jul 2024 18:53:08 GMT

Hi,

I am running same issue on R81.10 T150, Any updates on this ?

Re: Reverse Proxy dest path

Oryx — Fri, 12 Jul 2024 09:28:48 GMT

Hi,

Never had an official reply from Check Point about this.

To be honest, I did not invested too much energy on this. I've ended up starting a VM with Nginx to make the Reverse Proxy on my end customer. Since the Check Point Security Gateway was a new product for my end customer, I've come to the conclusion that it wasn't the best approach for him to manage the reverse proxy feature on the CLI. He was not technically mature enough for that.

So, I don't know if this issue was on R81.10 T150.

Kind Regards,

César Santos