Website not loading

Question

Hi All, 
 As we know understanding why a site is not loading is not easy with XG. I am getting crazy to troubleshoot why this url is not loading: 
 www.subito.it 
 Here some screenshot.

sachingurung · Accepted Answer

Hi, 
 The log states that the traffic is dropped due from fw_rule ID 7 due to IPS policy configured. Please 
 Date=2016-06-20 Time=12:10:35 log_id=0139021 log_type=Firewall log_component= log_subtype=Denied log_status=N/A log_priority=Alert duration=N/A in_dev=Port2 out_dev= inzone_id=1 outzone_id=0 source_mac=d4:ca:6d:b9:44:7e dest_mac=00:e0:b6:14:b4:21 l3_protocol=IP source_ip=104.84.191.93 dest_ip=192.168.0.7 l4_protocol=TCP source_port=80 dest_port=60217 fw_rule_id=7 policytype=2 live_userid=1 userid=6 user_gp=5 ips_id=5 sslvpn_id=0 web_filter_id=12 hotspot_id=0 icap_id=0 app_filter_id=0 app_category_id=0 app_id=3 category_id=6 bandwidth_id=45 up_classid=13 dn_classid=131081 
 Check IPS logs and allow the signature inside the ISP policy. 
 Thanks

sachingurung · Answer

Hi Luk, 
 Take SSH to XG and go to option 4. System console. Type, drop-packet-capture 'host x.x.x.x or website. Post the logs if you discover any drops while requesting the web url. Drop packet capture command shall provide you 90% information on drop packets and their cause. 
 Thanks

sachingurung · Answer

Hi Luk, 
 In such cases, Log_ID plays an important role. Check the System Log ID attached by Aditya in my troubleshooting guide and you will know the trick. 
 Thanks