Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 29 subscribers
  • Views 3709 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

awarrenhttp_access.log report many web request blocked with stauscode 500

Ste

Hi, 

 

I see many web requests blocked with  action="error" and statuscode=500 if I set awarrenhttp service in Debug mode. These logs are refeared  to Microsoft links like:

url="https://config.edge.skype.com/"

url="https://login.windows.net/"

url="https://odc.officeapps.live.com/"

url="https://mobile.pipe.aria.microsoft.com/"

ecc..

I don't have any compliant from the costumers about, which makes me think there are no issues, but I would like to know what those are.

Can someone help me understanding what is generating these logs and what kind of issues they can lead to. 

SFOS 17.1.3 MR-3

Thank you



This thread was automatically locked due to age.
Parents
  • 0

    There is certainly no system-wide issue, but there can be configuration and other issues at specific sites.  Since you said you know debug mode, can you post a full log line from awarrenhttp_access.log, however a sample from awarrenhttp.log might be needed to determine the full issue (you can PM a snippet of the file).

  • 0 in reply to Michael Dunn

    Hi Michael,

     

    here some logs, I'm going to send you a private message with more samples. 

    1544459317.539587930 [16712/0x7f37af61c000] fwid=xx fwflag="N" iap=1 aap=0 conn_id=2322293568 id="0002" name="web request blocked" action="error" method="CONNECT" srcip="x.x.x.x" dstip="52.109.88.36" user="xxxx@domain.yyy" statuscode=500 cached=0 trxlen=1065 rxlen=4387 url="nexusrules.officeapps.live.com/" referer="" type="" upload_file_name="" upload_file_type="" download_file_name="" download_file_type="" authtime=0 dnstime=9 cattime=262 avscantime=0 fullreqtime=119954906 ua="" activity="" av_transaction_id="" categoryname="Information Technology" category="29" app_id=0 app_name="None" app_cat="None" exceptions="av,https,sandstorm"
    1544459317.546553033 [16715/0x7f37a6f14400] fwid=xx fwflag="N" iap=1 aap=0 conn_id=4083745184 id="0002" name="web request blocked" action="error" method="CONNECT" srcip="x.x.x.x" dstip="40.100.174.34" user="xxxx@domain.yyy" statuscode=500 cached=0 trxlen=736 rxlen=5464 url="outlook.office365.com/" referer="" type="" upload_file_name="" upload_file_type="" download_file_name="" download_file_type="" authtime=0 dnstime=160 cattime=220 avscantime=0 fullreqtime=118849669 ua="" activity="" av_transaction_id="" categoryname="Web E-Mail" category="81" app_id=2160 app_name="Office 365" app_cat="General Business" exceptions="av,https,sandstorm"
    1544459318.180640256 [16712/0x7f37af743000] fwid=xx fwflag="N" iap=1 aap=0 conn_id=2040735776 id="0002" name="web request blocked" action="error" method="CONNECT" srcip="x.x.x.x" dstip="52.109.28.22" user="xxxx@domain.yyy" statuscode=500 cached=0 trxlen=1228 rxlen=6863 url="odc.officeapps.live.com/" referer="" type="" upload_file_name="" upload_file_type="" download_file_name="" download_file_type="" authtime=0 dnstime=9 cattime=262 avscantime=0 fullreqtime=120496275 ua="" activity="" av_transaction_id="" categoryname="Information Technology" category="29" app_id=0 app_name="None" app_cat="None" exceptions="av,https,sandstorm"
    1544459320.544322913 [16714/0x7f37b757d400] fwid=xx fwflag="N" iap=1 aap=0 conn_id=1197045024 id="0002" name="web request blocked" action="error" method="CONNECT" srcip="x.x.x.x" dstip="52.114.158.53" user="" statuscode=500 cached=0 trxlen=30376 rxlen=6138 url="mobile.pipe.aria.microsoft.com/" referer="" type="" upload_file_name="" upload_file_type="" download_file_name="" download_file_type="" authtime=0 dnstime=3 cattime=705 avscantime=0 fullreqtime=13607070 ua="" activity="" av_transaction_id="" categoryname="Information Technology" category="29" app_id=0 app_name="None" app_cat="None" exceptions="av,https,sandstorm"

Reply
  • 0 in reply to Michael Dunn

    Hi Michael,

     

    here some logs, I'm going to send you a private message with more samples. 

    1544459317.539587930 [16712/0x7f37af61c000] fwid=xx fwflag="N" iap=1 aap=0 conn_id=2322293568 id="0002" name="web request blocked" action="error" method="CONNECT" srcip="x.x.x.x" dstip="52.109.88.36" user="xxxx@domain.yyy" statuscode=500 cached=0 trxlen=1065 rxlen=4387 url="nexusrules.officeapps.live.com/" referer="" type="" upload_file_name="" upload_file_type="" download_file_name="" download_file_type="" authtime=0 dnstime=9 cattime=262 avscantime=0 fullreqtime=119954906 ua="" activity="" av_transaction_id="" categoryname="Information Technology" category="29" app_id=0 app_name="None" app_cat="None" exceptions="av,https,sandstorm"
    1544459317.546553033 [16715/0x7f37a6f14400] fwid=xx fwflag="N" iap=1 aap=0 conn_id=4083745184 id="0002" name="web request blocked" action="error" method="CONNECT" srcip="x.x.x.x" dstip="40.100.174.34" user="xxxx@domain.yyy" statuscode=500 cached=0 trxlen=736 rxlen=5464 url="outlook.office365.com/" referer="" type="" upload_file_name="" upload_file_type="" download_file_name="" download_file_type="" authtime=0 dnstime=160 cattime=220 avscantime=0 fullreqtime=118849669 ua="" activity="" av_transaction_id="" categoryname="Web E-Mail" category="81" app_id=2160 app_name="Office 365" app_cat="General Business" exceptions="av,https,sandstorm"
    1544459318.180640256 [16712/0x7f37af743000] fwid=xx fwflag="N" iap=1 aap=0 conn_id=2040735776 id="0002" name="web request blocked" action="error" method="CONNECT" srcip="x.x.x.x" dstip="52.109.28.22" user="xxxx@domain.yyy" statuscode=500 cached=0 trxlen=1228 rxlen=6863 url="odc.officeapps.live.com/" referer="" type="" upload_file_name="" upload_file_type="" download_file_name="" download_file_type="" authtime=0 dnstime=9 cattime=262 avscantime=0 fullreqtime=120496275 ua="" activity="" av_transaction_id="" categoryname="Information Technology" category="29" app_id=0 app_name="None" app_cat="None" exceptions="av,https,sandstorm"
    1544459320.544322913 [16714/0x7f37b757d400] fwid=xx fwflag="N" iap=1 aap=0 conn_id=1197045024 id="0002" name="web request blocked" action="error" method="CONNECT" srcip="x.x.x.x" dstip="52.114.158.53" user="" statuscode=500 cached=0 trxlen=30376 rxlen=6138 url="mobile.pipe.aria.microsoft.com/" referer="" type="" upload_file_name="" upload_file_type="" download_file_name="" download_file_type="" authtime=0 dnstime=3 cattime=705 avscantime=0 fullreqtime=13607070 ua="" activity="" av_transaction_id="" categoryname="Information Technology" category="29" app_id=0 app_name="None" app_cat="None" exceptions="av,https,sandstorm"

Children
No Data