Issue with Https inspection

[Sunil_Sah]

 We are facing issue with https inspection for all url 

and getting below error logs due to this unable to access the urls

Internal system error in HTTPS Inspection due to categorization service timeout

The probe was unable to establish a TCP connection to the destination

Bypassing request as configured in engine settings of HTTPS Inspection

[Chris_Atkinson]

Please supply additional information and or contact TAC to investigate further.

At a minimum... when we're trusted CAs last updated and what Gateway version &:JHF?

[AaronCP]

Hi @Chris_Atkinson,

Is there any impact of updating the trusted CA list? Does it remove any CA's for any reason? Or simply add new ones?

Our trusted CA list hasn't been updated for a while (at least 2 years) and I'm reluctant to do it without knowing what happens.

Sorry to hijack the thread! Any advice would be much appreciated.

[the_rock]

Its 100% safe. I have done it probably more than 100 times and never had a problem. 

Andy

[AaronCP]

Thanks......again! 🙂

[the_rock]

For you, no charge, except iphone charge...thats corny joke of the day ; - )

[the_rock]

How is below configured?

Andy

 

 

[Julian_Sanchez]

This is the best practices of configurations for R81.10? 

[the_rock]

I believe so, its by default.

[Kaspars_Zibarts]

you might want to check this SK too (HTTPS Inspection log "Internal system error in HTTPS inspection due to categorization service error" in SmartConsole)

sk176925  

[the_rock]

Good sk, hope that helps.

[jkougoulos]

we face the same issue in the last days, based on some troubleshooting I did, it looks like the backend of the categorization web site (cws.checkpoint.com) has various issues causing timeouts / 504 errors etc. I mean the sk might help a bit, but it looks like there is a performance issue on the service itself