> Source: [sk184384](https://support.checkpoint.com/results/sk/sk184384)

# sk184384 - CloudGuard CME and CloudGuard Controller HTTP 1.1 connectivity Issues over Proxy

| Property | Value |
|----------|-------|
| Solution ID | sk184384 |
| Date Created | 2025-12-01 |
| Last Modified | 2026-05-19 |
| Technical Level | Advanced |
| Products | Cloud Firewall |
| Versions | R82.10, R81.10 (EOS), R81.20, R82 |
| OS | Gaia |
| Platform | OpenStack, AWS, Azure, Alibaba Cloud, Nutanix, GCP, OCI |

## Symptoms

- * `/var/log/CPcme/cme.log` shows an error with the stack trace tail similar to:  
  `File "/opt/CPcme/cloud_connectors/https.py", line 308, in connect
  self.proxy_connect(host, port)
  File "/opt/CPcme/cloud_connectors/https.py", line 405, in proxy_connect
  code, message, headers = self.proxy_request()
  ^^^^^^^^^^^^^^^^^^^^
  File "/opt/CPcme/cloud_connectors/https.py", line 424, in proxy_request
  version, code, message = line.split(' ', 2)
  ^^^^^^^^^^^^^^^^^^^^^^
  ValueError: not enough values to unpack (expected 3, got 1)`
* Product logs (at `/var/log/CPcme/`) show an error in proxy_request() similar to:  
  ` File "/opt/CPcme/cloud_connectors/https.py", line 82, in connect`  
  ` self.proxy_connect(host, port)`  
  ` File "/opt/CPcme/cloud_connectors/https.py", line 140, in proxy_connect`  
  ` code, message, headers = self.proxy_request()`  
  ` File "/opt/CPcme/cloud_connectors/https.py", line 157, in proxy_request`  
  ` line = fp.readline(_httplib._MAXLINE + 1).decode('utf-8')`  
  ` File "/etc/fw/Python/lib/python3.7/socket.py", line 589, in readinto`  
  ` return self._sock.recv_into(b)`  
  `ConnectionResetError: [Errno 104] Connection reset by peer`
* Product logs (at `$FWDIR/log/cloud_proxy.elg`) show an error in proxy_request() similar to:  
  `File "/opt/CPvsec-R81.20/scripts/azure/https.py", line 82, in connect
  self.proxy_connect(host, port)
  File "/opt/CPvsec-R81.20/scripts/azure/https.py", line 140, in proxy_connect
  code, message, headers = self.proxy_request()
  File "/opt/CPvsec-R81.20/scripts/azure/https.py", line 157, in proxy_request
  line = fp.readline(_httplib._MAXLINE + 1).decode('utf-8')
  File "/opt/CPsuite-R81.20/fw1/Python/lib/python3.7/socket.py", line 589, in readinto
  return self._sock.recv_into(b)
  ConnectionResetError: [Errno 104] Connection reset by peer`

## Cause

**Issue description**   
CloudGuard Network HTTPS-over-proxy implementation does not provide the required "host" header in HTTP/1.1 request over proxy connections.

Recent Jumbo HF takes, introduced a new quality improvement that drops HTTP/1.1 connections if they are missing the "host" header:

|---------|-------------------|-----------|
| Release | Jumbo Hotfix Take | ID        |
| R82     | 25 and above      | PRJ-58460 |
| R81.20  | 99 and above      | PRJ-58459 |
| R81.10  | 177 and above     | PRJ-58458 |

This quality improvement is documented in [sk183569](https://support.checkpoint.com/results/sk/sk183569)

<br />

When the following conditions are met:

* Security Management server running CloudGuard Controller or CloudGuard CME
* The Management server is configured to use an HTTPS proxy
* Traffic from the Management to the proxy, is routed through a Check Point Security Gateway
* The Security Gateway has one of the Jumbo Hotfix takes mentioned above

Then the gateway will drop the connection, effectively blocking CloudGuard Controller and CloudGuard CME to communicate with the Cloud/Data Center.  

<br />

**Affected products:**

**Note:** Only Security Managements that are configured to use an HTTPS proxy and are behind an applicable Security Gateway are affected  

|-----------------------|---------------------------------------------------------------------------------------------------------|
| Product               | Affected versions                                                                                       |
| CloudGuard Controller | R81.10 - Take 37 and below R81.20 - Take 34 and below R82 - Take 23 and below R82.10 - Take 3 and below |
| CloudGuard CME        | Take 318 and below                                                                                      |
| CloudWatch            | Image build 1999 and below                                                                              |
| s3.py                 | Image build 1999 and below                                                                              |

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content