Create a Post
Showing results for 
Search instead for 
Did you mean: 

Not able to access online payments websites with checkpoint firewall

I have configured checkpoint firewall, and having problems to access the online payment websites. All logs show that the traffic is passing through but the browser cannot display any pages. I have tried to add the policy to accept any traffic but still not able to access the sites. What can i be missing out?

4 Replies

Some concrete examples of:

  • Exact websites you were trying to access
  • Behaviors you saw (with screenshots)
  • Exact rule configuration
  • Is HTTPS Inspection enabled
  • Logs you saw
  • Any other useful information

Would be very helpful in providing you advice.

Also version of products involved (with patch levels).

0 Kudos

Find my comments added below

1. Exact websites you were trying to access

2. Behaviors you saw (with screenshots)

All browsers are just showing TLS handshake and then times out

3. Exact rule configuration

 Screenshot attached.Policy configured

4. Is HTTPS Inspection enabled

yes it is enabled

5. Logs you saw

I have the log in TXT format and i dont have an option to attach to this message. Please share email so that i can send to you

6. Any other useful information

Running R80 with version 121. I was advised to apply the hotfix fw1_wrapper_HOTFIX_R80_10_JHF_121_SMACK_626_030_GA_FULL by the support team but did not work.

0 Kudos

You are most likely not running R80 as this was not a gateway version, but actually R80.10 as suggested by the patch you mention.

The behavior suggests an issue negotiating HTTPS connections.

Log entries related to this might be there (particularly if HTTPS Inspection is enabled)--I would look for these.

tcpdumps of connections might also be interesting to look at.

Most likely to troubleshoot this much further, you're going to need assistance from the TAC.

Especially if they advised you to apply said patch and it didn't resolve the issue.

0 Kudos

Thank you for the response. I have taken the issue with the TAC team.

Their response time is a bit slow but i hope they will be able to assist.



0 Kudos


Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events