Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Sunil_Sah
Explorer

Issue with Https inspection

 We are facing issue with https inspection for all url 

and getting below error logs due to this unable to access the urls

 

 

Internal system error in HTTPS Inspection due to categorization service timeout

The probe was unable to establish a TCP connection to the destination

 

Bypassing request as configured in engine settings of HTTPS Inspection

0 Kudos
11 Replies
Chris_Atkinson
Employee Employee
Employee

Please supply additional information and or contact TAC to investigate further.

At a minimum... when we're trusted CAs last updated and what Gateway version &:JHF?

CCSM R77/R80/ELITE
0 Kudos
AaronCP
Advisor

Hi @Chris_Atkinson,

 

Is there any impact of updating the trusted CA list? Does it remove any CA's for any reason? Or simply add new ones?

 

Our trusted CA list hasn't been updated for a while (at least 2 years) and I'm reluctant to do it without knowing what happens.

 

Sorry to hijack the thread! Any advice would be much appreciated.

0 Kudos
the_rock
Legend
Legend

Its 100% safe. I have done it probably more than 100 times and never had a problem. 

Andy

AaronCP
Advisor

Thanks......again! 🙂

0 Kudos
the_rock
Legend
Legend

For you, no charge, except iphone charge...thats corny joke of the day ; - )

0 Kudos
the_rock
Legend
Legend

How is below configured?

Andy

Screenshot_1.png

Screenshot_2.png

0 Kudos
(1)
Julian_Sanchez
Collaborator

This is the best practices of configurations for R81.10? 

 

0 Kudos
the_rock
Legend
Legend

I believe so, its by default.

0 Kudos
Kaspars_Zibarts
Employee Employee
Employee

you might want to check this SK too (HTTPS Inspection log "Internal system error in HTTPS inspection due to categorization service error" in SmartConsole)

sk176925  

the_rock
Legend
Legend

Good sk, hope that helps.

0 Kudos
jkougoulos
Participant

we face the same issue in the last days, based on some troubleshooting I did, it looks like the backend of the categorization web site (cws.checkpoint.com) has various issues causing timeouts / 504 errors etc. I mean the sk might help a bit, but it looks like there is a performance issue on the service itself

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events