The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Security Gateway with enabled HTTPS Inspection crashes repeatedly
| Solution ID |
sk108653 |
| Product |
HTTPS Inspection |
| Version |
R76, R76SP, R77, R77.10, R77.20 |
| OS |
Gaia, SecurePlatform 2.6, Gaia Embedded |
| Platform / Model |
All |
| Date Created |
13-Nov-2015
|
| Last Modified |
21-May-2017
|
Symptoms
Security Gateway with enabled HTTPS Inspection crashes repeatedly.
Disabling HTTPS Inspection resolves the issue.
vmcore dump file (sk44186) contains the following stack:
PID: ... TASK: ... CPU: N COMMAND: "pepd"
#0 [...] machine_kexec at ...
#1 [...] crash_kexec at ...
#2 [...] kdb_main_loop at ...
#3 [...] kdba_main_loop at ...
#4 [...] kdb at ...
#5 [...] kdba_entry at ...
#6 [...] notifier_call_chain at ...
#7 [...] __die at ...
#8 [...] do_page_fault at ...
#9 [...] error_exit at ...
[exception RIP: nrb_rb_app_get_matched_application+...]
... ... ...
#10 [...] nrb_rb_app_get_matched_application() at ...
#11 [...] nrb_rb_app_get_matched_application() at ...
#12 [...] appi_transaction_conn_process_rb_match_result() at ...
#13 [...] appi_transaction_handle_rulebase_async_ok_reply() at ...
#14 [...] advp_work_under_streaming_lock_cb() at ...
#15 [...] fwpslglue_run_in_ctx() at ...
#16 [...] advp_work_under_streaming_lock() at ...
#17 [...] appi_transaction_rulebase_async_reply_callback() at ...
#18 [...] nrb_async_call_client_cb() at ...
#19 [...] nrb_rulebase_async_reply_callback() at ...
#20 [...] idapi_fetch_id_async_cb() at ...
#21 [...] fwnac_id_handle_ioctl_response() at ...
#22 [...] nac_kioctl_NETWORK_REGISTER_RESPONSE_multik() at ...
#23 [...] fwdrv_ioctl() at ...
... ... ...
Cause
HTTPS Inspection might interpret clear traffic as SSLv2 and not process it correctly.
Solution
|
Note: To view this solution you need to
Sign In
.
|
