no header when accessing via checkpoint

[#1]

When we go to the http resource on port 8080, in the browser debug we notice that there is no HEAD header. In the case where we bypass CheckPoint, the HEAD header appears.

Because of the absence of this header, we don't see the video image when accessing from a PC.
When accessing from an IPAD, we can't even authenticate to the resource, at which time we see a blank screen when we try to log in through the app.

We assume that all of the problems are due to the fact that we are not getting a HEAD header through CheckPoint. The client cannot automatically get the HEAD header.

We did manage to copy the header itself though, while we were checking for access bypassing CheckPoint. After that, we connected to the network behind CheckPoint and navigated to the header in the browser and were able to get the image.

[#2]

When we go to the http resource on port 8080, in the browser debug we notice that there is no HEAD header. In the case where we bypass CheckPoint, the HEAD header appears.

Because of the absence of this header, we don't see the video image when accessing from a PC.
When accessing from an IPAD, we can't even authenticate to the resource, at which time we see a blank screen when we try to log in through the app.

We assume that all of the problems are due to the fact that we are not getting a HEAD header through CheckPoint. The client cannot automatically get the HEAD header.

We did manage to copy the header itself though, while we were checking for access bypassing CheckPoint. After that, we connected to the network behind CheckPoint and navigated to the header in the browser and were able to get the image.

[#3]

When we go to the http resource on port 8080, in the browser debug we notice that there is no HEAD header. In the case where we bypass CheckPoint, the HEAD header appears.

Because of the absence of this header, we don't see the video image when accessing from a PC.
When accessing from an IPAD, we can't even authenticate to the resource, at which time we see a blank screen when we try to log in through the app.

We assume that all of the problems are due to the fact that we are not getting a HEAD header through CheckPoint. The client cannot automatically get the HEAD header.

We did manage to copy the header itself though, while we were checking for access bypassing CheckPoint. After that, we connected to the network behind CheckPoint and navigated to the header in the browser and were able to get the image.

[Chris_Atkinson]

Which version/JHF, what blades are enabled?

Is the gateway working/configured as a proxy?

Do you have non-standard configuration for IPS protections such as:

[Chris_Atkinson]

Which version/JHF, what blades are enabled?

Is the gateway working/configured as a proxy?

Do you have non-standard configuration for IPS protections such as:

[Arturxr]

Which version/JHF, what blades are enabled? - 81.10, Take 66, firewall, mab, app control, url f, IA, monitoring, ips ab and av

Is the gateway working/configured as a proxy? - NO

Do you have non-standard configuration for IPS protections such as: - NO

[Arturxr]

Which version/JHF, what blades are enabled? - 81.10, Take 66, firewall, mab, app control, url f, IA, monitoring, ips ab and av

Is the gateway working/configured as a proxy? - NO

Do you have non-standard configuration for IPS protections such as: - NO

[PhoneBoy]

Try: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

[PhoneBoy]

Try: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

[Arturxr]

That didn't solve our problem

[Arturxr]

That didn't solve our problem

[Chris_Atkinson]

Recommend investigating further with TAC in that case.

Anything you can share with them about exceptions you've tested / trialed will also help.

[Chris_Atkinson]

Recommend investigating further with TAC in that case.

Anything you can share with them about exceptions you've tested / trialed will also help.

[the_rock]

I believe sk @PhoneBoy gave is your best bet.

[the_rock]

I believe sk @PhoneBoy gave is your best bet.