This is a professional blog of Check Point Certified Master Architect (CCMA).
It does not represent position of my current employer.
Hi Valeri,I have a problem with blocking in example youtube and facebook. Which are blocked when sessions are http (the blocked page shows up), and are not blocked at all when the sessions are https (the blocked page do not shows up). Example of logs from https inspection below.Info:- R75.20 virtualized in ESX (management installed saparately from security gateway)- Https Inspection enabled- Web site categorization mode is on HOLD- I have installed the certificate generated by the Security Gateway manually on user pc (installed in the Trusted Root Certification Authorities ).Number: 7221901Date: 2Oct2014Time: 15:18:15Interface: eth0Origin: CHECKPOINT-FWType: LogAction: DetectService: https (443)Source Port: 61127Source: Win7-10.240.0.13 (10.240.0.13)Destination: mil01s19-in-f9.1e100.net (220.127.116.11)Protocol: tcpProduct: HTTPS InspectionResource: google.comHTTPS Validation: Client has not installed CA certificatePolicy Info: Policy Name: StandardCreated at: Thu Oct 02 12:10:33 2014Installed from: CHECKPOINT-MGMTCould you please advise on this? Regards,Ardit
look into sk64148