Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Fallo Intermitente Conexión CCTV

 Buenos días. Tengo un problema con el acceso a un grabador cctv.

    He tenido en dos noches diferentes, fallos al conectar con un grabador de cctv que está a través de un tunel VPN. El problema es que no podemos acceder a dicho grabador, en el otro lado del tunel vpn no se registran las peticiones en el Firewall y en nuestro log veo lo siguiente.

Ejemplo log en el momento del Fallo

2021-08-31 10:19:59,messageid="00001" log_type="Firewall" log_component="Firewall Rule" log_subtype="Allowed" status="Allow" con_duration="125" fw_rule_id="34" nat_rule_id="0" policy_type="1" user="" user_group="" web_policy_id="1" ips_policy_id="0" appfilter_policy_id="1" app_name="" app_risk="0" app_technology="" app_category="" vlan_id="" ether_type="Unknown (0x0000)" bridge_name="" bridge_display_name="" in_interface="Port3.120" in_display_interface="INSIDE" out_interface="Port1.110" out_display_interface="OUTSIDE" src_mac="AC:E2:D3:E9:7F:FF" dst_mac="C8:4F:86:FC:00:03" src_ip="10.11.1.208" src_country="R1" dst_ip="172.27.33.63" dst_country="R1" protocol="TCP" src_port="55120" dst_port="37777" packets_sent="2" packets_received="0" bytes_sent="104" bytes_received="0" src_trans_ip="" src_trans_port="0" dst_trans_ip="" dst_trans_port="0" src_zone_type="LAN" src_zone="LAN" dst_zone_type="VPN" dst_zone="VPN" con_direction="" con_event="Stop" con_id="551647104" virt_con_id="" hb_status="No Heartbeat" message="" appresolvedby="Signature" app_is_cloud="0" ,

Ejemplo de conexión correcta unas horas despues sin cambiar ninguna configuración.

2021-08-31 13:01:35,messageid="00001" log_type="Firewall" log_component="Firewall Rule" log_subtype="Allowed" status="Allow" con_duration="43" fw_rule_id="34" nat_rule_id="0" policy_type="1" user="" user_group="" web_policy_id="1" ips_policy_id="0" appfilter_policy_id="1" app_name="HTTP" app_risk="1" app_technology="Browser Based" app_category="General Internet" vlan_id="" ether_type="Unknown (0x0000)" bridge_name="" bridge_display_name="" in_interface="Port3.120" in_display_interface="INSIDE" out_interface="Port1.110" out_display_interface="OUTSIDE" src_mac="AC:E2:D3:E9:7F:FF" dst_mac="C8:4F:86:FC:00:03" src_ip="10.11.1.208" src_country="R1" dst_ip="172.27.33.63" dst_country="R1" protocol="TCP" src_port="58094" dst_port="37777" packets_sent="4" packets_received="2" bytes_sent="314" bytes_received="92" src_trans_ip="" src_trans_port="0" dst_trans_ip="" dst_trans_port="0" src_zone_type="LAN" src_zone="LAN" dst_zone_type="VPN" dst_zone="VPN" con_direction="" con_event="Stop" con_id="206395264" virt_con_id="" hb_status="No Heartbeat" message="" appresolvedby="Signature" app_is_cloud="0" ,

Cuando se produce el fallo muestra App_risk="0" y app_technology="",app_category="". Alguien sabe por que puede estar sucediendo esto o ha tenido el mismo problema¿



This thread was automatically locked due to age.
  • Hello Ivan,

    Thank you for contacting the Sophos Community.

    It looks like the request wasn’t detected as HTTP, which is why probably the other side might have no responded to the 2 packets sent.

    I would recommend you if this issue happens every day, to do a tcpdump on the Ipsec tunnel to confirm if the packets are being sent, then you can confirm on the other end.

    Regards,

  • gracias por la respuesta. el problema solo ha ocurrido dos veces y se ha solucionado después de unas horas. Si vuelve a suceder, comprobaré la conexión con tcpdump. Saludos