https://community.checkpoint.com/t5/Spark-Firewall-SMB/Problem-with-updating-URLF-AC-and-Anti-Bot-Anti-Virus-on-SMB/m-p/211138#M10494 <P>Yeah, we can see the traffic in the logs<BR />We see it on the proxy server, too.</P><P>We've filed a case with TAC, but so far no luck.<BR /><BR /></P><P>We have a strange picture: when checking via curl_cli (without specifying a proxy) the message "connection refused" comes out, also we see that the connection goes to ipv6 addresses. But ipv6 is disabled on CheckPoint, and the proxy server prioritizes ipv4.</P><P>Also we don't see any problems on the proxy server, connection to CheckPoint update servers is available.<BR />We also tried through the proxy server from other hardware, but the result is the same.</P><P>On CheckPoint itself, Internet access is only via proxy, there are no interfaces with ISP global addresses.</P><P>There are no problems with updates on other CheckPoints with regular Internet access via ISP. Also, for example, on CheckPoint 4600 series the update through a proxy goes through. And when curl_cli is applied to ipv4 addresses.</P> Fri, 12 Apr 2024 12:49:50 GMT Oliver_222 2024-04-12T12:49:50Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/Problem-with-updating-URLF-AC-and-Anti-Bot-Anti-Virus-on-SMB/m-p/206500#M10325 <P>&nbsp;</P><P>Good afternoon</P><P>We have CheckPoint 1530 R80.20</P><P>We have detected a problem with updating URL Filtering (1), Anti-Bot, Anti-Virus (2), Application Control (3).<BR />We have configured access to the Internet via proxy server. Screenshot of connection to <A href="http://cws.checkpoint.com" target="_blank">http://cws.checkpoint.com</A> (4)<BR />I also attach other screenshots.</P><P>Can you please tell me what could be the problem?</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="1.png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24557i1C88D059A09B7340/image-size/medium?v=v2&amp;px=400" role="button" title="1.png" alt="1.png" /></span> </P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2.png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24558i938E6ACC93F4CC4D/image-size/medium?v=v2&amp;px=400" role="button" title="2.png" alt="2.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="3.png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24559i6541CEE94A15C136/image-size/medium?v=v2&amp;px=400" role="button" title="3.png" alt="3.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="4.png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24560iD96E3A1FB554B9C0/image-size/medium?v=v2&amp;px=400" role="button" title="4.png" alt="4.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="5.png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24561i17CC5A4B214645A9/image-size/medium?v=v2&amp;px=400" role="button" title="5.png" alt="5.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="6.png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24562i611E6CEB2785DBBC/image-size/medium?v=v2&amp;px=400" role="button" title="6.png" alt="6.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="7.png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24563iEA81561D7C3CEEB6/image-size/medium?v=v2&amp;px=400" role="button" title="7.png" alt="7.png" /></span></P><P>  </P><P> </P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>       </P> Tue, 20 Feb 2024 09:27:30 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Problem-with-updating-URLF-AC-and-Anti-Bot-Anti-Virus-on-SMB/m-p/206500#M10325 Oliver_222 2024-02-20T09:27:30Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/Problem-with-updating-URLF-AC-and-Anti-Bot-Anti-Virus-on-SMB/m-p/207592#M10326 <P>Do you see proxy traffic originating from your SMB device?<BR />In any case, you should get the TAC involved if you haven't already.<BR /><A href="https://help.checkpoint.com" target="_blank">https://help.checkpoint.com</A>&nbsp;</P> Fri, 01 Mar 2024 20:44:34 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Problem-with-updating-URLF-AC-and-Anti-Bot-Anti-Virus-on-SMB/m-p/207592#M10326 PhoneBoy 2024-03-01T20:44:34Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/Problem-with-updating-URLF-AC-and-Anti-Bot-Anti-Virus-on-SMB/m-p/211138#M10494 <P>Yeah, we can see the traffic in the logs<BR />We see it on the proxy server, too.</P><P>We've filed a case with TAC, but so far no luck.<BR /><BR /></P><P>We have a strange picture: when checking via curl_cli (without specifying a proxy) the message "connection refused" comes out, also we see that the connection goes to ipv6 addresses. But ipv6 is disabled on CheckPoint, and the proxy server prioritizes ipv4.</P><P>Also we don't see any problems on the proxy server, connection to CheckPoint update servers is available.<BR />We also tried through the proxy server from other hardware, but the result is the same.</P><P>On CheckPoint itself, Internet access is only via proxy, there are no interfaces with ISP global addresses.</P><P>There are no problems with updates on other CheckPoints with regular Internet access via ISP. Also, for example, on CheckPoint 4600 series the update through a proxy goes through. And when curl_cli is applied to ipv4 addresses.</P> Fri, 12 Apr 2024 12:49:50 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Problem-with-updating-URLF-AC-and-Anti-Bot-Anti-Virus-on-SMB/m-p/211138#M10494 Oliver_222 2024-04-12T12:49:50Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/Problem-with-updating-URLF-AC-and-Anti-Bot-Anti-Virus-on-SMB/m-p/211166#M10495 <P>Send me the ticket # in PM and I'll take a look.<BR />The only other thing I can suggest is updating to the R81.10.10 release&nbsp;<A href="https://support.checkpoint.com/results/sk/sk181080" target="_blank">https://support.checkpoint.com/results/sk/sk181080</A>&nbsp;</P> Fri, 12 Apr 2024 17:46:56 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Problem-with-updating-URLF-AC-and-Anti-Bot-Anti-Virus-on-SMB/m-p/211166#M10495 PhoneBoy 2024-04-12T17:46:56Z