- Products
- Learn
- Local User Groups
- Partners
- More
Firewall Uptime, Reimagined
How AIOps Simplifies Operations and Prevents Outages
Introduction to Lakera:
Securing the AI Frontier!
Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
HTTPS Inspection
Help us to understand your needs better
CheckMates Go:
SharePoint CVEs and More!
Hi,
Firewall is running R80.20.
We have a web server used for clients to upload files.
Https inspection is enabled and setup for incoming connections to this server.
When they try to upload large files around 350MB it times out.
If I disable https inspection it works. Is there any limitations for HTTPS inspection and large file?
Thanks
Francis
Looks like the issue was with HTTP/2. TAC advised to disable it with
Although HTTP/2 is supposed to be supported, it did fix our issue.
Version is to old to give any good advice.
Maybe start with upgrade if not possible you can check: https://support.checkpoint.com/results/sk/sk150933
Oups I did it again. It's a typo. We're at R81.20
Yea, thats a tricky problem, specially if its inbound https inspection. I would personally open TAC case, but they will probabl;y ask you to debug wstlsd process.
Andy
It may not be HTTPS Inspection, but one of the other Software Blades.
What is enabled here?
IPSec VPN, Mobile Access, Application Control, URL filtering, Identity Awareness, Cluster XL, Monitoring, IPS, Anti-Bot, Anti-Virus.
As I get more detail about this, It's not just for very large file upload. It's for any file upload but it's intermittent, sometime it works sometime it doesn't. Though the larger the file, the more it seems to fail.
But if I disable HTTPS inspection for incoming connections to that web server, it works every time.
I would still follow the sk I gave you, because it may help you lots before opening TAC case, as Im fairly sure they would ask you to run that debug.
Andy
Yes, I did that and opened a ticket. We'll see what they say.
To help you out further, if you are allowed to, I am happy to check the debug myself, as long as you are allowed to send it.
Best,
Andy
Thanks Andy, I appreciate the offer. I don't think I'm allowed so I'll wait for TAC's answer. I'll post updates when they get back to me.
Totally fair, I dont want you to be in trouble because of that. Let us know what TAC says. Hope there is quick solution.
I am running really good https inspection lab on R81.20, so will log in later and see if there are some settings in legacy dashboard that could cause this. Will take some screenshots and send it over, just working on some Azure stuff now, so may be in couple hours or so.
Best,
Andy
Looks right to me...anyway, lets wait see what TAC says. Im super curious how this gets solved.
Andy
What Threat Prevention profile applies to this connection?
Is it a custom profile or one of the standard ones (e.g. "Optimized")?
Or are you using Autonomous Threat Prevention?
custom.
That has to work 100%. I have client that implemented inbound https inspection on R81.10 and there were no issues. I would expect it to be better in R81.20
Andy
I would change Low Confidence from Detect to Inactive.
You know, that's not a bad idea at all. I don't recall ever having any use for Low Confidence detection.
Looks like the issue was with HTTP/2. TAC advised to disable it with
Although HTTP/2 is supposed to be supported, it did fix our issue.
Thats really good to know, thanks for letting us know.
Andy
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
User | Count |
---|---|
16 | |
12 | |
6 | |
6 | |
5 | |
4 | |
4 | |
4 | |
4 | |
3 |
Tue 07 Oct 2025 @ 10:00 AM (CEST)
Cloud Architect Series: AI-Powered API Security with CloudGuard WAFThu 09 Oct 2025 @ 10:00 AM (CEST)
CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!Thu 09 Oct 2025 @ 10:00 AM (CEST)
CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!Wed 22 Oct 2025 @ 11:00 AM (EDT)
Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents OutagesAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY