SSL Outbound Inspection Bypass for www.telekom.de

[Daniel_Hainich]

hi, i need to bypass www.telekom.de in https inspection.

i tried *.telekom.de, www.telekom.de  as custom application. but none of them is working. traffic is still inspected.

what iam doing wrong?

thanks

daniel

[the_rock]

I just tested it in my lab and I put *telekom.de* and worked fine.

Andy

[Daniel_Hainich]

i tried it with *telekom.de* and it is not working. iam running R81.20 take 84

[the_rock]

I think something may had been cashed. I just tried it on my iphone, site does not even come up, so looks like its website issue, NOT ssl inspection problem.

Andy

[Daniel_Hainich]

i think in the same direction, because some other sites i set on bypass are working. only this site isnt working. i opened the site on different devices, and the site is looking different on each device.

on monday i try it on my r82 lab. maybe they can fix it over the weekend.

[the_rock]

Just for my own sanity, I even connected to Germany via nordvpn account and even then, I could NOT get to the site and Im talking about my personal desktop at home.

I tried below:

telekom.de

https://www.telekom.de

www.telekom.de

Same issue, nothing worked.

Andy

[Daniel_Hainich]

thank your for the help!

[the_rock]

Sure, any time mate. That is why Im 100% sure its not an issue with the fw/ssl inspection, based on the test I had done. I even tried same method from my personal laptop, exact same result.

That alone, without any doubt, tells me its website problem.

Andy

[the_rock]

This site works fine and seems to be totally legit/valid.

Andy

 

[Daniel_Hainich]

hi,

today i checked the exception again in my R82 lab. iam not able to configure an bypass for certain sites.

example: www.heise.de and www.telekom.de

what iam doing wrong?

i defined the custom applications as described here: https://support.checkpoint.com/results/sk/sk165094

thanks

daniel

[the_rock]

Heise site works fine for me, no issues. Im sure telekom.de is broken, if it ever worked.

Andy

[Daniel_Hainich]

but why heise istn working in my lab. the bypass rules are not working. until i disable the inspection-rule, all traffic will be inspected. i tried my regex and without. do you have an idea?

[the_rock]

Btw, Im in Canada est, so 6 hours behind you, just starting my day. Happy to do remote and fix it for you. I do ssl inspection issues all the time, so Im confident we can figure it out.

Let me know.

Andy

[the_rock]

I dont have an idea until I saw your environment, sorry. Only other thing I could go by would be to make sure below is set and also if you can send the log showing why it fails.

Andy

 

[the_rock]

*heise.de* has to work, I tested it myself. What does traffic log show?

Andy

[the_rock]

Lets do remote if you are allowed to. I got a feeling its not working because of what I pointed out.

Andy