Check Point HARMONY R81 Administration Manual page 295

Identify Reverse Proxy logs by these criteria:
n Category: Mobile Access
n Application: Reverse Proxy
The Access section of the log can show:
n Allowed - Authorized URL - The Reverse Proxy allowed the URL request (only shows if
the All access events logging option is configured)
n Denied - Unauthorized URL -The Reverse Proxy blocked the URL request. If this is a
mistake, you can allow the URL.
To allow a blocked URL:
On the command line, run:
l
ReverseProxyCLI show applications
Under capsule_docs app in the Paths column, find the path that is
l
unauthorized in the log.
n Failed - The Reverse Proxy failed to forward the request for the EPS with one of these
messages:
Internal Server Error - The Endpoint Security Management Server aborted the
l
connection with the Security Gateway. Make sure the Endpoint Security
Management Server is working.
Proxy not found -The given proxy host could not be resolved.
l
Can't resolve host name - The <capsule_docs_server> is the internal_
l
host you configured in your capsule_docs application, you can see it under
ReverseProxyCLI show applications in the Internal Server Name
column.
Your Endpoint Security Management Server is configured as a DNS name. Make
sure that this hostname can be resolved from the Security Gateway. To do this run
nslookup on the host to see that the Security Gateway can resolve it.
Internal host connection failed - Failed to connect to the internal server, make
l
sure the server is up and running.
Invalid URL - The URL from the Security Gateway to the Endpoint Security
l
Management Server was not properly formatted.
SSL handshake failed -A problem occurred somewhere in the SSL/TLS
l
handshake between the Security Gateway and the Endpoint Security Management
Server.
R81 Harmony Endpoint Server Administration Guide | 295
Capsule Docs