This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

STAS causing dropped packets?

We have recently migrated from cyberoam. I had CTAS configured before and then re-deployed STAS. None of my firewall rules use Identity, however for about 2 minutes out of every 30-45 minutes my users have no connection to any other VLAN or LAN on the router. After a couple minutes it clears its self. All off my user are affected and they can all ping the router, but not past it. When I run a Drop-Packet-Capture command I see "log_type=Firewall log_component=Identity log_subtype=Denied" for every entry. Is it possible that "Unauth-Traffic Drop Time: 120 sec" setting in the AUTH CTA section are somehow related? I'm running 15 MR2

Any suggestions to tracking down the issue?

This thread was automatically locked due to age.

Parents

0 sachingurung over 9 years ago

Hi Neal,

Initially, I request you an upgrade to MR3.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 NealBellamy over 9 years ago in reply to sachingurung

I upgraded to MR3 last Thursday. It seemed to be less often, but It happened again this morning. What is the next step to troubleshooting?
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 9 years ago in reply to NealBellamy

Hi Neal,

Does this happen with every user or any specific user? If it occurs with a particular user please verify that there is no use of any special characters in the original name of the User on AD.

Take SSH to XG, go to option 5.>3. Advance shell and type: service access_server:debug -ds nosync

> cd /log

> tail -f access_server.log | grep username

Post the logs.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 NealBellamy over 9 years ago in reply to sachingurung

everybody is having issues, and there are no special characters in the usernames (Usernames are first name and last initial i.e. NealB)

I have started the debug logging. Do you want the output now or wait until it have an issue again?

Thanks,

Neal
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 NealBellamy over 9 years ago in reply to sachingurung

everybody is having issues, and there are no special characters in the usernames (Usernames are first name and last initial i.e. NealB)

I have started the debug logging. Do you want the output now or wait until it have an issue again?

Thanks,

Neal
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data