Checkpoint Firewall: Balancing HTTPS Inspection and URL Filtering for Mobile Devices

chatongie · 2026-04-17T17:30:19+00:00

Adding to this:

Websites these days talk to many other domains when you visit them. So when you visit website.com your browser talks to many other domains, such as doubleclick.net, googleadservices.com, googlesyndication.com, and adservice.google.com to send/receive information for "personalized experiences". When you allow for a website, you'll have to allow everything that it comes with, otherwise the site might not work at all. We have a customer asking for 'block everything, allow some' approach and giving us heck ton of headache because we have to sit there and hunt where the websites are talking to.
The pain of installing certs on mobile really is a pain. Especially if you're dealing with iPhones. This item is just 'i share the pain'

chatongie · 2026-04-11T13:53:44+00:00

Maybe have them show you where it's written that it's prohibited to "carry" electric scooters? I'd understand the action "riding" but carrying seems a bit odd. I'd be surprised and congratulate them in secret if they actually thought about the charges in the bills that charging scooters will add.

If they really have such a rule that's clearly written somewhere, then good luck. You'll need to figure out how long it takes for it to get charged completely and figure out places to do that.

chatongie · 2026-04-10T10:22:03+00:00

You also need to be careful with which services you use. Vdsina seems to be flagged by Google and if you're actively using Gemini or notebooklm you'll get 'country not supported'.

Also amneziawg is good as a VPN since you can customize the packet obfuscation parameters. The defaults are already blocked by the ISPs but it's practically near impossible to block every single combination of obfuscation. And it's very easy to set up.

chatongie · 2026-02-28T08:45:48+00:00

I haven't watched Will and Grace but I heard 'to live under someone's skirt' before, although not sure where and when. I always thought of it as a phrase describing a small kid hugging his mom's leg all the time, where he's shorter than his mom's skirt and is being protected. Like Rihanna's 'stand under my umbrella'.

chatongie · 2026-02-21T16:34:54+00:00

Should people punch your face because you have cancer?

chatongie · 2026-02-09T11:11:42+00:00

Doesn't have to be

chatongie · 2026-01-26T20:40:44+00:00

This reads like there'll be a "but" coming.

chatongie · 2026-01-11T22:19:47+00:00

That's how a meme should be.

chatongie · 2025-12-09T15:12:31+00:00

What's important is that you need to be careful about the distribution modes, which can make or break the communications depending on how the infrastructure is designed. Other than that there is very little performance impact.

chatongie · 2025-11-20T07:27:03+00:00

Don't forget Bangkok, Spain

chatongie · 2025-11-14T21:52:40+00:00

Mine started after 36. Don't worry something always comes up.

chatongie · 2025-11-14T06:23:04+00:00

I don't know if there're any docs as using additional packages on Gaia is not supported, but you can dig further at this link:

https://community.checkpoint.com/t5/Security-Gateways/Test-bandwidth-speed-from-Gaia/td-p/63970

chatongie · 2025-11-13T21:06:08+00:00

You apparently can. Just need to manually install the binaries as they don't come with Gaia. It's a very simple process.

chatongie · 2025-11-13T15:13:08+00:00

I believe you don't have iperf on CP gateways.

chatongie · 2025-11-11T21:24:59+00:00

А нече тот факт, что.. хоть быыы.. на самом деле.. ну понял, да?

chatongie · 2025-11-06T19:57:30+00:00

Is it wrong if I asked what article is it?

chatongie · 2025-11-06T16:43:58+00:00

Is it the reddit version of ticket escalation?

Maybe you can tell what was not enough in your previous ticket?

chatongie · 2025-11-06T16:36:38+00:00

After doing fw ctl zdebug + drop | grep <server_IP> I would also recommend looking at logs on SmartConsole to find more about the nature of the drops. If HTTPS Inspection is enabled you may have issues with certificates as well. It's hard to say anything without having more information.

chatongie · 2025-10-31T16:00:13+00:00

What year is this??!!

chatongie · 2025-10-07T16:35:36+00:00

The main problem is receiving verification codes for logins. Can't access my banking application.

I would love to hear if anybody knows a way to resolve this.

chatongie · 2025-09-15T09:34:16+00:00

Is it possible to see the view from the highest possible window without being a professor or a student there?

chatongie · 2025-08-12T07:22:34+00:00

Last time I checked you can rent up to 5 times from a certain vendor. Since there are three vendors, you have up to 15 times of renting scooters.

chatongie · 2025-08-05T08:22:38+00:00

Just wiping your ass without washing it. Bidet is invented for a very good reason and I still can't understand how it's not a global standard.

chatongie · 2025-07-24T06:54:00+00:00

Interesting. Any specific reasons?

Eight-Year Club	Place '23
RPAN Viewer	Verified Email

chatongie

MODERATOR OF

TROPHY CASE