Guest User!

You are not Sophos Staff.

[9.170][BUG] WAF Problem Outlook Web App no longer works

Release 9.170-21. OWA no longer works. Here are the logs:

2013:11:22-23:18:39 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="0" user="-" host="109.44.102.34" method="GET" statuscode="301" reason="-" extra="-" exceptions="-" time="9291661" url="/owa" server="my.domain.de" referer="-" cookie="WhlPII=2" set-cookie="-"
2013:11:22-23:18:39 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="0" user="-" host="109.44.102.34" method="GET" statuscode="302" reason="-" extra="-" exceptions="-" time="161055" url="/owa/" server="my.domain.de" referer="-" cookie="WhlPII=2" set-cookie="sessionid=; path=/; expires=Thu, 01-Jan-1970 00:00:00 GMT, cadata=; path=/; expires=Thu, 01-Jan-1970 00:00:00 GMT"
2013:11:22-23:18:40 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="752" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="539215" url="/owa/auth/logon.aspx" server="my.domain.de" referer="-" cookie="WhlPII=2" set-cookie="OutlookSession=81b85f96e2cc4f2a9b798f42f2231409; path=/; secure; HttpOnly"
2013:11:22-23:18:40 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="891" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="85501" url="/owa/14.2.347.0/themes/resources/logon.css" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:40 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="1571" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="31950" url="/owa/14.2.347.0/themes/resources/owafont.css" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:40 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="1658" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="45833" url="/owa/14.2.347.0/scripts/premium/flogon.js" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:41 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="3112" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="52793" url="/owa/auth/logon.aspx" server="my.domain.de" referer="-" cookie="WhlPII=2; OutlookSession=81b85f96e2cc4f2a9b798f42f2231409" set-cookie="-"
2013:11:22-23:18:41 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="4450" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="23680" url="/owa/14.2.347.0/themes/resources/lgntopl.gif" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:41 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="550" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="24330" url="/owa/14.2.347.0/themes/resources/lgntopr.gif" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:41 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="61" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="29681" url="/owa/14.2.347.0/themes/resources/lgnexlogo.gif" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:41 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="742" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="19906" url="/owa/14.2.347.0/themes/resources/favicon.ico" server="my.domain.de" referer="-" cookie="-" set-cookie="OutlookSession=259a54e77a344c8e8732d120b7d67050; path=/; secure; HttpOnly"
2013:11:22-23:18:41 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="9303" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="38640" url="/owa/14.2.347.0/themes/resources/lgnbotl.gif" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:41 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="329" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="15664" url="/owa/14.2.347.0/themes/resources/lgnright.gif" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:41 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="2367" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="31845" url="/owa/14.2.347.0/themes/resources/lgnbotr.gif" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:41 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="313" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="8094" url="/owa/14.2.347.0/themes/resources/lgnleft.gif" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:41 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="58" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="7549" url="/owa/14.2.347.0/themes/resources/lgntopm.gif" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:41 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="249" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="9130" url="/owa/14.2.347.0/themes/resources/lgnbotm.gif" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:51 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="0" user="-" host="109.44.102.34" method="POST" statuscode="302" reason="-" extra="-" exceptions="-" time="68584" url="/owa/auth.owa" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:51 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="763" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="13943" url="/owa/auth/logon.aspx" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:51 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="3191" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="21048" url="/owa/auth/logon.aspx" server="my.domain.de" referer="-" cookie="cookieTest=1; logondata=acc=0&lgn=klaus; WhlPII=2; OutlookSession=81b85f96e2cc4f2a9b798f42f2231409; PBack=0" set-cookie="-"
2013:11:22-23:18:59 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="0" user="-" host="109.44.102.34" method="POST" statuscode="302" reason="-" extra="-" exceptions="-" time="15426" url="/owa/auth.owa" server="my.domain.de" referer="my.domain.de/.../logon.aspx
2013:11:22-23:18:59 asg-1 reverseproxy: srcip="109.44.102.34" localip="172.16.10.10" size="763" user="-" host="109.44.102.34" method="GET" statuscode="200" reason="-" extra="-" exceptions="-" time="13630" url="/owa/auth/logon.aspx" server="my.domain.de" referer="my.domain.de/.../logon.aspx

the System time is correct [:S]
€dit
On the utm is no Reverse authentication configured. on the Exchange Server is Formebased Auth configured.