> Source: [sk184271](https://support.checkpoint.com/results/sk/sk184271)

# sk184271 - "Cache HTTPS Response" Vulnerability on Check Point Gateway

| Property | Value |
|----------|-------|
| Solution ID | sk184271 |
| Date Created | 2025-11-09 |
| Last Modified | 2025-11-11 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R81.20 |
| OS | Gaia |
| Platform | Open Server |

## Symptoms

- Security vulnerability scan detected a **Cache HTTPS Response** vulnerability on the Check Point Security Gateway. The **Cache-Control** header is missing in HTTPS responses from the Gaia WebUI.

## Cause

The vulnerability occurs due to default or missing HTTPS security headers in the Check Point Security Gateway and Gaia WebUI configurations. Specifically, the absence of proper caching directives allows sensitive data to be stored in the browser cache.

## Solution

Modify the template configuration file on the Security Gateway:  

1. Edit the file:  
   `/web/templates/httpd2.conf.templ`
2. Locate the following lines:  
   `<IfModule headers_module>`  
   ` Header set X-UA-Compatible: IE=EmulateIE8`  
   `</IfModule>`
3. Change it to:  
   `<IfModule headers_module>`  
   ` Header set X-UA-Compatible: IE=EmulateIE8`  
   ` # Prevent Caching`  
   ` Header always set Cache-Control "no-cache, no-store, must-revalidate"`  
   ` Header always set Pragma "no-cache"`  
   ` Header always set Expires 0`  
   `</IfModule>`
4. Reboot the machine to apply changes.

**Alternative (Temporary fix if reboot is not planned immediately):**   

1. Edit the file:  
   `/web/conf/httpd2.conf`
2. Apply the same changes as above.
3. Restart the `httpd2` process for changes to take effect temporarily.  
   **Note**- These changes will be lost after the next reboot.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content