r80.20 - Application Control - HTTP parsing error occurred (2)

[Pantsu]

hello 
I have URL filtering in checkpoint and when i try to enter in some web page it's writing this error in web browser:"Error: Error: The Web Socket transport is in an invalid state, transitioning into reconnecting". 
and in the smartconsol logs, there is these logs:

see it in screenshots.  

1) IPS detect , but accept

 

2) Alert and Block Traffic

 

[G_W_Albrecht]

Much too small screenshots !

[Pantsu]

there are only these logs 

[PhoneBoy]

Possible this is fixed in a recent JHF.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
Recommend getting the TAC involved.

[Pantsu]

thanks .
i'll  try it in the weekend

[dumbhead123]

I am seeing similar behavior with couple of firewalls on R80.20 too. While there are IPS detect messages with same error "HTTP parsing error occurred, bypassing request" under IPS with accept action.
This is observed on different ports too (may be the nature of traffic could be HTTP).

Did you happen to get a solution.

[Guillaume_CH]

Hello, anyone also seeing this issue ?

i am having in r80.20 too, i am seeing it also as an IPS logs

"HTTP parsing error occurred, bypassing request"

action is accept.

looks like it is on http(80) traffic between some app servers

no details on traffic, but i was wondering if it could be an issue in the HTTP protocol decryption process/library

thanks

[PhoneBoy]

We might be able to fix this with a TAC case and packet captures of the relevant traffic.