Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Contributor

r80.20 - Application Control - HTTP parsing error occurred (2)

hello 
I have URL filtering in checkpoint and when i try to enter in some web page it's writing this error in web browser:"Error: Error: The Web Socket transport is in an invalid state, transitioning into reconnecting". 
and in the smartconsol logs, there is these logs:

see it in screenshots.  

 

1) IPS detect , but accept

check_error2.jpg

2) Alert and Block Traffic

check_error.jpg

 

0 Kudos
Reply
7 Replies
Highlighted
Champion
Champion

Much too small screenshots !

0 Kudos
Reply
Highlighted
Contributor

there are only these logs 

0 Kudos
Reply
Highlighted
Admin
Admin

Possible this is fixed in a recent JHF.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
Recommend getting the TAC involved.
0 Kudos
Reply
Highlighted
Contributor

thanks .
i'll  try it in the weekend

0 Kudos
Reply
Highlighted
Participant

I am seeing similar behavior with couple of firewalls on R80.20 too. While there are IPS detect messages with same error "HTTP parsing error occurred, bypassing request" under IPS with accept action.
This is observed on different ports too (may be the nature of traffic could be HTTP).

Did you happen to get a solution.
0 Kudos
Reply
Highlighted
Explorer

Hello, anyone also seeing this issue ?

 

i am having in r80.20 too, i am seeing it also as an IPS logs

"HTTP parsing error occurred, bypassing request"

action is accept.

 

looks like it is on http(80) traffic between some app servers

no details on traffic, but i was wondering if it could be an issue in the HTTP protocol decryption process/library

 

thanks

 

Tags (1)
0 Kudos
Reply
Highlighted
Admin
Admin

We might be able to fix this with a TAC case and packet captures of the relevant traffic.
0 Kudos
Reply