multiple redirects for cws.checkpoint.com

Robin_Gruyters — Mon, 24 Jul 2017 09:00:42 GMT

After installing R77.20.60 I noticed that our WAN connection sometimes drops. When checking the logs I noticed that I have multiple redirects messages.

2017 Jul 24 09:56:03 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:56:04 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:56:28 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:56:43 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:56:53 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:57:18 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:57:43 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:57:47 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:58:06 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:58:08 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:58:33 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:58:58 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:59:23 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:59:48 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 10:00:04 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 10:00:13 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 10:00:38 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 10:01:03 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434

There where 137 redirects.(!) In the mean time no traffic was possible towards Internet.

Anybody experiencing the same problem?

This issue was on our Check Point Gateway 1490 with WiFi running R77.20.60.

Re: multiple redirects for cws.checkpoint.com

PhoneBoy — Mon, 24 Jul 2017 19:45:53 GMT

cws.checkpoint.com is used to look up indicators for Social Media Widgets, URL Filtering, Anti-Bot, and Anti-Virus per How to verify that Security Gateway and/or Security Management Server can access Check Point servers?

There's two potential reasons you're seeing this error:

The WAN connection actually went down and this is just a symptom of that
There was a temporary problem on cws.checkpoint.com, which depending on the fail-open/closed setting you've picked, may cause Internet connectivity to be blocked. If you continue to see this message, contact the TAC.

Re: multiple redirects for cws.checkpoint.com

Pedro_Espindola — Tue, 25 Jul 2017 14:20:51 GMT

Weird. I only get that when I try to access the gateway's portal on port 80 or 443 instead of 4434. Make sure this address is not routing you back to the gateway for some reason.

Re: multiple redirects for cws.checkpoint.com

Robin_Gruyters — Fri, 04 Aug 2017 11:58:17 GMT

Issue was that the WAN connection has a gateway check enabled, which was the issue. Changed it to DNS and everything is fine.

topic Re: multiple redirects for cws.checkpoint.com in Spark Firewall (SMB)

multiple redirects for cws.checkpoint.com

Re: multiple redirects for cws.checkpoint.com

Re: multiple redirects for cws.checkpoint.com

Re: multiple redirects for cws.checkpoint.com