Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 303 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[9.106-17] Web Protection fail

innovare
Hi Sophos

We have two troubbles in one Sophos UTM 110 Basicguard.

1. In the WP log this msg are displayed constantly and the users cant browser.

2013:11:28-01:15:02 utm9-fp-1 httpproxy[30021]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="818" message="server 'cffs26.astaro.com' access time: 513ms"
2013:11:28-01:15:03 utm9-fp-1 httpproxy[30021]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="818" message="server 'cffs08.astaro.com' access time: 539ms"
2013:11:28-01:15:03 utm9-fp-1 httpproxy[30021]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="818" message="server 'cffs10.astaro.com' access time: 594ms"
2013:11:28-01:15:04 utm9-fp-1 httpproxy[30021]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="818" message="server 'cffs15.astaro.com' access time: 658ms"
2013:11:28-01:15:05 utm9-fp-1 httpproxy[30021]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="818" message="server 'cffs17.astaro.com' access time: 691ms"

2. With Sophos activated to scan the browser the CPU usage increment the use at 20% o more and in ramdom times the browse navigation fail.

With AV deactivated the browse navigation work fine.

Regards

Linck Tello Flores
Innovare - Seguridad Informática


This thread was automatically locked due to age.
Parents
  • 0
    Hi, Linck,

    1. Those lines from the Web Filtering file represent the ping times for the categorization servers.  Every 10 minutes, the UTM checks to see which one responds most quickly, and then uses that one for the ensuing 10 minutes.

    2. Some sites don't work with the slight latency created by AV scanning.  Please show a line from the log where browsing failed.

    Cheers - Bob
Reply
  • 0
    Hi, Linck,

    1. Those lines from the Web Filtering file represent the ping times for the categorization servers.  Every 10 minutes, the UTM checks to see which one responds most quickly, and then uses that one for the ensuing 10 minutes.

    2. Some sites don't work with the slight latency created by AV scanning.  Please show a line from the log where browsing failed.

    Cheers - Bob
Children
No Data