Unable to download PDF's when using Check Point HTTP/S Proxy

[danielnfletcher]

Afternoon,  

we have recently enabled the HTTP/S proxy functionality of our Check Point 6400 gateway running R80.40 T89, and have encountered an issue with downloading PDF files over 100K.  

Has anyone else encountered this issue?  We dont appear to be able to identify an obvious cause in our logs.  

Thanks 

Dan  

[PhoneBoy]

There is a limit to the file sizes processed by Threat Emulation/Extraction.
However, you should be able to configure what happens when this limit is exceeded (the file is allowed or blocked).
Believe this is done in the Threat Prevention profile.

[Vincent_Bacher]

In the past we used to recommend not using a CP gateway as explicit proxy and better use a so developed proxy such as Bluecoat   🙂

[danielnfletcher]

Thanks PhoneBoy, we decided to raise this issue with TAC and they are working with R&D to get to the bottom of the cause.