Issue accessing a Web GUI based device

Invalid Traffic is most likely no issue in this case.

https://community.sophos.com/kb/en-us/131754

You should start to perform a tcpdump and dig deeper in the packet flow.

https://community.sophos.com/products/community-chat/f/knowledge-base-article-suggestions/105811/how-to-tcpdump-on-xg

Invalid Traffic is most likely no issue in this case.

https://community.sophos.com/kb/en-us/131754

You should start to perform a tcpdump and dig deeper in the packet flow.

https://community.sophos.com/products/community-chat/f/knowledge-base-article-suggestions/105811/how-to-tcpdump-on-xg

Thanks for the reply.

Tried increasing the timeout which didn't help and then proceeded to take a capture and look at it in wireshark.

Not that I'm an expert with it but think it's related to invalid packet sequences (This frame is a (suspected) out-of-order segment - from wireshark) but could be wrong and don't understand why it is treating the traffic in this way.

Would upload the file but this errors when selecting the file.

Can you share Screenshots of this connection attempt in Wireshark? 

https://wiki.wireshark.org/TCP_3_way_handshaking

You should look for the Handshake. 

OK, really strange as I'm not seeing the 3 way handshake in the capture results:

(hope image is good enough)

Used this command to capture the info from the XG:

tcpdump host 192.168.255.1 and 192.168.1.50 -b -w /tmp/dump.pcap

(I believe this gets all traffic from first IP to second?)

Just for info I do have a virtual router that I use to use to be able to connect between test LAN\DMZ\External and have had no issues connecting to the Netscaler GUI.

So most likely those packets are unanswered by the Destination.

Try to use this command without -b -w and take a look, if XG is sending / using the correct interface outbound.

Hi

Thanks for your help and info on this.

I managed to track down the issue to a config setting on the Netscaler.

I'm now able to access the GUI console.

Regards