Custom Application Control (Check Point Signature Tool)

[Amir_Rehman]

Hello There,

I am trying to create a custom app to block keywords  based on HTML page content. I have created the one (below screenshot) to block a keyword "Momo" in the body. 

It works for http sites  and as well as Https sites with https inspection enabled.

The problem is that it produces a lot of false positives. It blocks almost every site with https inspection enabled. Does anybody know if the app needs more fields or customization in http scenario (screen shot 2 ).

[G_W_Albrecht]

That is rather easy - you are using the regular expression [momo] that will match every single little m character in source html! You can see that here: Online regex tester and debugger: PHP, PCRE, Python, Golang and JavaScript 

Look at my tests:

RegEx is RegEx - has been discussed here already, e.g. URL Filtering Policy