The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Connectivity issues through Security Gateway in Proxy mode due to an extra space in DNS Query sent by the Security Gateway
|
Technical Level
|
Solution ID |
sk106428 |
Technical Level |
|
Product |
Quantum Security Gateways, ClusterXL, Cluster - 3rd party |
Version |
R77.20, R77.30 (EOL) |
Platform / Model |
All |
Date Created |
11-Jun-2015
|
Last Modified |
09-Apr-2017
|
Symptoms
Connectivity issues through Security Gateway in Proxy mode due to an extra space in DNS Query sent by the Security Gateway.
SmartView Tracker logs show that connections are rejected due to DNS timeout:
Action = Reject
Reason = Proxy: DNS timeout/error; Connection was rejected due to DNS timeout or error
Traffic capture on Security Gateway in Proxy mode shows that DNS Query sent by Security Gateway to a DNS server contains an extra space at the end of the Hostname (e.g., the length of "helpdesk.mycompany.com" string is 23 bytes = 22 letters + 1 extra space).
When running the nslookup command to resolve a hostname, traffic capture shows that DNS Query does not contain an extra space.
Solution
|
Note: To view this solution you need to
Sign In
.
|