multiple redirects for cws.checkpoint.com

[Robin_Gruyters]

After installing R77.20.60 I noticed that our WAN connection sometimes drops. When checking the logs I noticed that I have multiple redirects messages.

2017 Jul 24 09:56:03 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:56:04 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:56:28 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:56:43 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:56:53 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:57:18 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:57:43 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:57:47 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:58:06 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:58:08 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:58:33 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:58:58 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:59:23 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 09:59:48 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 10:00:04 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 10:00:13 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 10:00:38 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434
2017 Jul 24 10:01:03 gw daemon.info thttpd[2197]:  [handle_redirect] - redirecting to https://cws.checkpoint.com:4434

There where 137 redirects.(!) In the mean time no traffic was possible towards Internet.

Anybody experiencing the same problem?

This issue was on our Check Point Gateway 1490 with WiFi running R77.20.60.

[PhoneBoy]

cws.checkpoint.com is used to look up indicators for Social Media Widgets, URL Filtering, Anti-Bot, and Anti-Virus per How to verify that Security Gateway and/or Security Management Server can access Check Point servers... 

There's two potential reasons you're seeing this error:

1. The WAN connection actually went down and this is just a symptom of that
2. There was a temporary problem on cws.checkpoint.com, which depending on the fail-open/closed setting you've picked, may cause Internet connectivity to be blocked. If you continue to see this message, contact the TAC.

[Pedro_Espindola]

Weird. I only get that when I try to access the gateway's portal on port 80 or 443 instead of 4434. Make sure this address is not routing you back to the gateway for some reason.

[Robin_Gruyters]

Issue was that the WAN connection has a gateway check enabled, which was the issue. Changed it to DNS and everything is fine.