Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Pantsu
Contributor

r80.20 - Application Control - HTTP parsing error occurred (2)

hello 
I have URL filtering in checkpoint and when i try to enter in some web page it's writing this error in web browser:"Error: Error: The Web Socket transport is in an invalid state, transitioning into reconnecting". 
and in the smartconsol logs, there is these logs:

see it in screenshots.  

 

1) IPS detect , but accept

check_error2.jpg

2) Alert and Block Traffic

check_error.jpg

 

0 Kudos
7 Replies
G_W_Albrecht
Legend
Legend

Much too small screenshots !

CCSE CCTE CCSM SMB Specialist
0 Kudos
Pantsu
Contributor

there are only these logs 

0 Kudos
PhoneBoy
Admin
Admin

Possible this is fixed in a recent JHF.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
Recommend getting the TAC involved.
0 Kudos
Pantsu
Contributor

thanks .
i'll  try it in the weekend

0 Kudos
dumbhead123
Contributor

I am seeing similar behavior with couple of firewalls on R80.20 too. While there are IPS detect messages with same error "HTTP parsing error occurred, bypassing request" under IPS with accept action.
This is observed on different ports too (may be the nature of traffic could be HTTP).

Did you happen to get a solution.
0 Kudos
Guillaume_CH
Explorer

Hello, anyone also seeing this issue ?

 

i am having in r80.20 too, i am seeing it also as an IPS logs

"HTTP parsing error occurred, bypassing request"

action is accept.

 

looks like it is on http(80) traffic between some app servers

no details on traffic, but i was wondering if it could be an issue in the HTTP protocol decryption process/library

 

thanks

 

0 Kudos
(1)
PhoneBoy
Admin
Admin

We might be able to fix this with a TAC case and packet captures of the relevant traffic.
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events