## HTTPS Inspection Probe Bypass on R80.20, should I enable? Hello, I´m using R80.20 Take 33, when I enable the flag enhanced\_ssl\_inspection some sites don´t open in browsers like chrome (version 58 or 71)... example: [www.uol.com,](http://www.uol.com,/) [www.bitcointrade.com.br](http://www.bitcointrade.com.br/)...etc... any tips or sugestions? Thank you. Alessandro - Tags: - [https inspection](https://community.checkpoint.com/t5/tag/https%20inspection/tg-p/board-id/general-topics) 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/31341?t:ac=board-id/general-topics/message-id/6531/thread-id/6531&t:cp=kudos/contributions/tapletcontributionspage&ticket=HbkkOMuhjUUZ_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/General-Topics/HTTPS-Inspection-Probe-Bypass-on-R80-20-should-I-enable/m-p/31341) - [All forum topics](https://community.checkpoint.com/t5/General-Topics/bd-p/general-topics/page/391 "General Topics") - [Previous Topic](https://community.checkpoint.com/t5/General-Topics/CPX-360-content-is-unavailable/td-p/46681 "CPX 360 content is unavailable") - [Next Topic](https://community.checkpoint.com/t5/General-Topics/ClusterXL-Cluster-IDs-R77-30/td-p/12456 "ClusterXL Cluster IDs (R77.30)") 2 Replies [Kim\_Moberg](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/9262) Advisor ‎2019-02-0709:01 AM [Show option menu](https://community.checkpoint.com/t5/General-Topics/HTTPS-Inspection-Probe-Bypass-on-R80-20-should-I-enable/m-p/31341# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=6532) - [Permalink](https://community.checkpoint.com/t5/General-Topics/HTTPS-Inspection-Probe-Bypass-on-R80-20-should-I-enable/m-p/31342/highlight/true#M6532) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/6532/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/31342) Hi Alessandro Is it SNI domains your are trying to access? Did you try to analyze and inspect domains via https://www.ssllab.com? It will show you certicate type and which encryption is enabled. I had to enable some encryption protocol levels when using probe bypass. Best regards Kim Best Regards Kim 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/31342?t:ac=board-id/general-topics/message-id/6531/thread-id/6531&t:cp=kudos/contributions/tapletcontributionspage&ticket=HbkkOMuhjUUZ_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/General-Topics/HTTPS-Inspection-Probe-Bypass-on-R80-20-should-I-enable/m-p/31341) [Emanuele\_Lorenz](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/25093) Explorer ‎2019-03-1303:04 AM [Show option menu](https://community.checkpoint.com/t5/General-Topics/HTTPS-Inspection-Probe-Bypass-on-R80-20-should-I-enable/m-p/31341# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=9031) - [Permalink](https://community.checkpoint.com/t5/General-Topics/HTTPS-Inspection-Probe-Bypass-on-R80-20-should-I-enable/m-p/46725/highlight/true#M9031) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/9031/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/46725) The behaviour has been changed, please look at sk104717: **Important:** - In R80.10, before Jumbo Hotfix Accumulator for R80.10 Take 189, the probing feature is set, by default, to Fail Open. - From Take 189, the default behavior is changed to Fail Close. - You can return to the behavior as it was before Take 189, by setting bypass\_on\_enhanced\_ssl\_inspection 1 **To set the default to Fail Open:** 1. Run: fw ctl set int bypass\_on\_enhanced\_ssl\_inspection 1 2. In $FWDIR/modules/fwkern.conf, add this line: bypass\_on\_enhanced\_ssl\_inspection=1 **The probing feature may fail in the following scenarios (and therefore it is not recommended):** - Server requires an SNI extension in the SSL "Client hello" packet. - Missing cipher - The Security Gateway does not support any of the server allowed ciphers. - The server presents an incorrect certificate when SNI is not provided **To disable probing (Recommended):** 1. Run: fw ctl set int enhanced\_ssl\_inspection 0 2. In $FWDIR/modules/fwkern.conf, add this line: enhanced\_ssl\_inspection=0 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/46725?t:ac=board-id/general-topics/message-id/6531/thread-id/6531&t:cp=kudos/contributions/tapletcontributionspage&ticket=HbkkOMuhjUUZ_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/General-Topics/HTTPS-Inspection-Probe-Bypass-on-R80-20-should-I-enable/m-p/31341) Post Reply Leaderboard Epsum factorial non deposit quid pro quo hic escorol. | User | Count | | --- | --- | |
[israelfds95](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/93117) | 13 | |
[HeikoAnkenbrand](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/21670) | 7 | |
[simonemantovani](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/79070) | 5 | |
[emmap](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/71054) | 3 | |
[Steffen\_Appel](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/10477) | 2 | |
[Kaspars\_Zibarts](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11456) | 1 | |
[Alex-](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/10384) | 1 | |
[Danny](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/687) | 1 | |
[Bob\_Zimmerman](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/27871) | 1 | |
[DH](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/25118) | 1 | [View All ≫](https://community.checkpoint.com/t5/forums/kudosleaderboardpage/board-id/general-topics/timerange/one_month/page/1/tab/authors) Trending Discussions [Five Habits That Improved My Check Point Deployments](https://community.checkpoint.com/t5/General-Topics/Five-Habits-That-Improved-My-Check-Point-Deployments/td-p/279760) [Automatically Renew VPN Certificates](https://community.checkpoint.com/t5/General-Topics/Automatically-Renew-VPN-Certificates/td-p/279072) [Snapshot and /boot disk space full](https://community.checkpoint.com/t5/General-Topics/Snapshot-and-boot-disk-space-full/td-p/280183) Upcoming Events Sort by: - [All](https://community.checkpoint.com/t5/General-Topics/HTTPS-Inspection-Probe-Bypass-on-R80-20-should-I-enable/m-p/31341#) - [Virtual](https://community.checkpoint.com/t5/General-Topics/HTTPS-Inspection-Probe-Bypass-on-R80-20-should-I-enable/m-p/31341#) - [In-Person](https://community.checkpoint.com/t5/General-Topics/HTTPS-Inspection-Probe-Bypass-on-R80-20-should-I-enable/m-p/31341#) [Virtual](https://community.checkpoint.com/labels/Virtual) Tue 28 Jul 2026 @ 11:00 AM (EDT) [Under the Hood - Check Point and Illumio – Modern Network Defense Against AI-Based Threats](https://community.checkpoint.com/t5/CheckMates-Events/Under-the-Hood-Check-Point-and-Illumio-Modern-Network-Defense/ev-p/279701) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 12:00 PM (SGT) [The AI Security Report 2026: A Turning Point for Enterprise Defense - SGT](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280019) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 02:00 PM (IDT) [The AI Security Report 2026: A Turning Point for Enterprise Defense - AMER](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280021) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 03:00 PM (CEST) [The AI Security Report 2026: A Turning Point for Enterprise Defense EMEA](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280020) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 11:00 AM (EDT) [TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370) Thu 30 Jul 2026 @ 11:30 AM (CDT) [CheckMates Live DFW: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/CheckMates-Live-DFW-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279920) [Virtual](https://community.checkpoint.com/labels/Virtual) Tue 28 Jul 2026 @ 11:00 AM (EDT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 12:00 PM (SGT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 02:00 PM (IDT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 03:00 PM (CEST) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 11:00 AM (EDT) [TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370) [Virtual](https://community.checkpoint.com/labels/Virtual) Thu 30 Jul 2026 @ 10:00 AM (PDT) [AI Security Masters E12: READY OR NOT: Securing the AI Enterprise 4/5 - AI Gateway](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Masters-E12-READY-OR-NOT-Securing-the-AI-Enterprise/ev-p/277411) [In-Person](https://community.checkpoint.com/labels/In-Person) Tue 11 Aug 2026 @ 11:30 AM (EDT) [New York City: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/New-York-City-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279476) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 13 Aug 2026 @ 11:30 AM (EDT) [Waltham, MA: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/Waltham-MA-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279475) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 20 Aug 2026 @ 08:30 AM (COT) [Medellin: Workspace Evolution: Hybrid Mesh Management - Visibilidad, Automatización e IA](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Evolution-Hybrid-Mesh-Management-Visibilidad/ev-p/280003) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 20 Aug 2026 @ 06:00 PM (COT) [Medellin: Workspace Intelligence: IA Generativa en Acción para Equipos de Seguridad](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Intelligence-IA-Generativa-en-Acci%C3%B3n-para/ev-p/280004) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 27 Aug 2026 @ 09:00 AM (CEST) [Check Point Hands-On SASE and Cloud Workshop - Zurich](https://community.checkpoint.com/t5/CheckMates-Events/Check-Point-Hands-On-SASE-and-Cloud-Workshop-Zurich/ev-p/279914) [In-Person](https://community.checkpoint.com/labels/In-Person) Wed 21 Oct 2026 @ 09:00 AM (BST) [AI Security Workshop - Glasgow](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Workshop-Glasgow/ev-p/278505) [CheckMates Events](https://community.checkpoint.com/t5/CheckMates-Events/eb-p/events) [Top](https://community.checkpoint.com/t5/General-Topics/HTTPS-Inspection-Probe-Bypass-on-R80-20-should-I-enable/m-p/31341) About CheckMates - [Getting Started & FAQ](https://community.checkpoint.com/t5/help/faqpage) - [Community Guidelines](https://community.checkpoint.com/t5/user/TermsOfServicePage) Learn Check Point - [Check Point for Beginners](https://community.checkpoint.com/t5/Check-Point-for-Beginners-2-0/bg-p/check-point-for-beginners-2-0) - [Check Point Trivia](https://community.checkpoint.com/t5/Check-Point-Trivia/bg-p/trivia) - [CheckFlix Videos](https://community.checkpoint.com/t5/CheckFlix/ct-p/checkflix) Advanced Learning - [Check Point Security Masters](https://community.checkpoint.com/t5/Check-Point-Security-Masters/gp-p/ccsm) - [Tip of the Week](https://community.checkpoint.com/t5/SecureKnowledge-Tip-of-the-Week/bg-p/secureknowledge) - [TechTalks](https://community.checkpoint.com/t5/TechTalks/ct-p/techtalks%20role=) - [Training and Certification](https://community.checkpoint.com/t5/Training-and-Certification/bd-p/training-and-certification) Resources - [CheckMates Toolbox](https://community.checkpoint.com/t5/CheckMates-Toolbox/ct-p/CheckMatesToolbox) - [Developers (Code Hub)](https://community.checkpoint.com/t5/Developers-API-CLI/bd-p/codehub) - [Product Announcements](https://community.checkpoint.com/t5/Product-Announcements/bg-p/products-blog) - [Upcoming Events](https://community.checkpoint.com/t5/Upcoming-Events/bg-p/checkmates-live) Non-English Discussions - [Español](https://community.checkpoint.com/t5/Espa%C3%B1ol/bd-p/spanish) - [French](https://community.checkpoint.com/t5/Fran%C3%A7ais/bd-p/francais) - [Japanese](https://community.checkpoint.com/t5/Japanese-%E6%97%A5%E6%9C%AC%E8%AA%9E/bd-p/Japanese) - [Português](https://community.checkpoint.com/t5/Portugu%C3%AAs/bd-p/portuguese) - [Russian](https://community.checkpoint.com/t5/Russian/bd-p/russian) - [Chinese](https://community.checkpoint.com/t5/Chinese/bd-p/taiwan) YOU DESERVE THE BEST SECURITY We’re Social. Follow Us [CheckMates on LinkedIn](http://linkedin.com/company/cpcheckmates) [Check Point on YouTube](https://www.youtube.com/user/CPGlobal) [CheckMates on Facebook](https://www.facebook.com/cpcheckmates/) [CheckMates on Instagram](https://www.instagram.com/cpcheckmates/) ©1994-2026 Check Point Software Technologies Ltd. All rights reserved. [Copyright](https://www.checkpoint.com/copyright/) [Privacy Policy](https://www.checkpoint.com/privacy/) [About Us](https://www.checkpoint.com/about-us/) [UserCenter](https://usercenter.checkpoint.com/) Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.