<!--
	For problematic rules, see Check_Point-problematic.xml.


	Nonfunctional subdomains:

		- rus *
		- strong01
		- track

	* Refused


	Problematic subdomains:

		- ^ ¹
		- blog ² 
		- forums ³
		- media ¹
		- supportcontent ¹
		- search.us ²
		- threatemulation ³

	¹ Mismatched
	² Mixed css
	³ Server sends no certificate chain, see https://whatsmychaincert.com


	Insecure cookies are set for these domains:

		- appwiki.checkpoint.com
		- careers.checkpoint.com
		- downloads.checkpoint.com
		- forums.checkpoint.com
		- supportcenter.checkpoint.com
		- threatemulation.checkpoint.com
		- threatwiki.checkpoint.com
		- search.us.checkpoint.com
		- usercenter.checkpoint.com


	Mixed content:

		- css on search.us from download.zonealarm.com ¹

		- Images, on:

			- store from sc1 *
			- search.us from download.zonealarm.com ¹

	¹ Not secured by us <= mismatched
	* Secured by us

-->
<ruleset name="Check Point.com (partial)">

	<!--	Direct rewrites:
				-->
	<target host="appwiki.checkpoint.com" />
	<target host="blog.checkpoint.com" />
	<target host="careers.checkpoint.com" />
	<target host="dl3.checkpoint.com" />
	<target host="downloads.checkpoint.com" />
	<!--target host="forums.checkpoint.com" /-->
	<target host="sc1.checkpoint.com" />
	<target host="store.checkpoint.com" />
	<target host="supportcenter.checkpoint.com" />
	<!--target host="threatemulation.checkpoint.com" /-->
	<target host="threatwiki.checkpoint.com" />
	<!--target host="search.us.checkpoint.com" /-->
	<target host="usercenter.checkpoint.com" />
	<target host="www.checkpoint.com" />

	<!--	Complications:
				-->
	<target host="checkpoint.com" />
	<target host="media.checkpoint.com" />

		<!--	Avoid broken MCB:
						-->
		<exclusion pattern="^http://blog\.checkpoint\.com/+(?!wp-content/)" />

			<!--	+ve:
					-->
			<test url="http://blog.checkpoint.com/2015/03/24/cuckoodroid-fighting-tide-android-malware/" />
			<test url="http://blog.checkpoint.com/feed/" />

			<!--	-ve:
					-->
			<test url="http://blog.checkpoint.com/wp-content/themes/cp-corporate-blog/css/base.css" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^careers\.checkpoint\.com$" name="^CATS$" /-->
	<!--securecookie host="^(appwiki|downloads|forums|supportcenter|threatemulation|threatwiki|search\.us)\.checkpoint\.com$" name="^JSESSIONID$" /-->
	<!--securecookie host="^(forums|supportcenter|usercenter)\.checkpoint\.com$" name="^saplb_\*$" /-->
	<!--securecookie host="^usercenter\.checkpoint\.com$" name="^servicerequestcreatecookie$" /-->

	<securecookie host="^.+\.checkpoint\.com$" name=".+" />


	<rule from="^http://checkpoint\.com/"
		to="https://www.checkpoint.com/" />

	<rule from="^http://media\.checkpoint\.com/"
		to="https://a248.e.akamai.net/f/248/1/1/media.checkpoint.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
