- Products
- Learn
- Local User Groups
- Partners
- More
CheckMates Fifth Birthday
Celebrate with Us!
days
hours
minutes
seconds
Join the CHECKMATES Everywhere Competition
Submit your picture to win!
Check Point Proactive support
Free trial available for 90 Days!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
The 2022 MITRE Engenuity ATT&CK®
Evaluations Results Are In!
Now Available: SmartAwareness Security Training
Training Built to Educate and Engage
MITRE ATT&CK
Inside Check Point products!
CheckFlix!
All Videos In One Space
Hi,
While doing some logs inspection we found that one of our Custom Application (whitelisting) is in the top trafic.
After checking the logs we found that some Web Advertisement are matching this rule to a wrong categorization
URL Whitelist contains:
*.example.com
The logs reported in our report contains this ressource:
https://c.go-mpulse.net/api/config.json?key=XXXX&d=support.example.com&t=XXXX
From my understanding this shoul not trigger a hit ??
I decided to follow this SK174194
The URL partially matches the URL defined in the custom application/Site field
Example:
The custom URL is defined as example.com and matches URL example.commerce.com
When scanning for the URL, the URL must be closed off with a forward slash: "/", otherwise example.commerce.com will match example.com
Close the URL string with "/" at the end, for the correct match.
Example of the correct definition: "example.com/"
From my understanding this shoul not trigger a hit ??
After implementing the SK a hit to the following URL is still matching
https://c.go-mpulse.net/api/config.json?key=XXXX&d=support.example.com/test&t=XXXX
What is the correct implementation to only filter:
http(s)://support.example.com/ or http(s)://example.com/ if possible without Regex as HTTPS inspection is not enabled for all profiles
Thank you
Without HTTPS Inspection the rest of the URL should be irrelevant.
With HTTP, it might be worth a TAC case to clarify.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY