Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 15 replies
  • Subscribers 2 subscribers
  • Views 13718 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Go to Meeting recently blocked

ccnaman
ASG V8.31... Recently, don't know exactly when, my users have not been able to connect to Go to meeting. In the firewall log I am showing default drop fwrule 60002 for packets going to port 443. Anyone else ever had something like this happen? Oddly enough I can connect to the test meeting that they provide ( https://www3.gotomeeting.com/join/406552062 )???

Thanks,
Richard


This thread was automatically locked due to age.
Parents
  • 0
    Thanks Barry... Here are the lines from the firewall log, I see nothing in the IPS or AC logs. New lines inserted, notice the drops for port 443. As far as the https proxy setting, please see attached, is this what you're asking?

    Thanks again, Richard

    srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.0.144" dstip="81.18.240.138" proto="6" length="52" tos="0x00" prec="0x00" ttl="126" srcport="52267" dstport="80" tcpflags="SYN" 
    2013:11:27-08:04:18 dartmofw01 ulogd[5527]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="6" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.1.27" dstip="208.67.222.222" proto="17" length="72" tos="0x00" prec="0x00" ttl="126" srcport="53346" dstport="53" 
    2013:11:27-08:04:18 dartmofw01 ulogd[5527]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.0.105" dstip="202.12.28.131" proto="17" length="62" tos="0x00" prec="0x00" ttl="126" srcport="61280" dstport="53" 
    2013:11:27-08:04:18 dartmofw01 ulogd[5527]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="6" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.0.20" dstip="208.67.222.222" proto="17" length="66" tos="0x00" prec="0x00" ttl="126" srcport="54881" dstport="53" 
    2013:11:27-08:04:18 dartmofw01 ulogd[5527]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.5.75" dstip="74.125.228.3" proto="6" length="48" tos="0x00" prec="0x00" ttl="122" srcport="4514" dstport="443" tcpflags="SYN" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="6" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.1.27" dstip="208.67.222.222" proto="17" length="76" tos="0x00" prec="0x00" ttl="126" srcport="61017" dstport="53" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.0.161" dstip="74.125.228.1" proto="6" length="52" tos="0x00" prec="0x00" ttl="126" srcport="49266" dstport="80" tcpflags="SYN" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.0.146" dstip="74.125.228.3" proto="6" length="52" tos="0x00" prec="0x00" ttl="126" srcport="50884" dstport="443" tcpflags="SYN" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.1.146" dstip="81.18.240.138" proto="6" length="48" tos="0x00" prec="0x00" ttl="126" srcport="53558" dstport="80" tcpflags="SYN" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.1.146" dstip="81.18.240.138" proto="6" length="48" tos="0x00" prec="0x00" ttl="126" srcport="53559" dstport="80" tcpflags="SYN" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="6" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.1.27" dstip="208.67.222.222" proto="17" length="190" tos="0x00" prec="0x00" ttl="126" srcport="61982" dstport="53" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="6" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.1.27" dstip="208.67.222.222" proto="17" length="114" tos="0x00" prec="0x00" ttl="126" srcport="56735" dstport="53" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="6" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.0.20" dstip="208.67.222.222" proto="17" length="125" tos="0x00" prec="0x00" ttl="126" srcport="53587" dstport="53" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="60006" initf="eth0" srcmac="b4:b5:2f:bb:ff:b1" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.1.14" dstip="192.9.1.231" proto="6" length="52" tos="0x00" prec="0x00" ttl="128" srcport="58292" dstport="4444" tcpflags="SYN"
Reply
  • 0
    Thanks Barry... Here are the lines from the firewall log, I see nothing in the IPS or AC logs. New lines inserted, notice the drops for port 443. As far as the https proxy setting, please see attached, is this what you're asking?

    Thanks again, Richard

    srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.0.144" dstip="81.18.240.138" proto="6" length="52" tos="0x00" prec="0x00" ttl="126" srcport="52267" dstport="80" tcpflags="SYN" 
    2013:11:27-08:04:18 dartmofw01 ulogd[5527]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="6" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.1.27" dstip="208.67.222.222" proto="17" length="72" tos="0x00" prec="0x00" ttl="126" srcport="53346" dstport="53" 
    2013:11:27-08:04:18 dartmofw01 ulogd[5527]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.0.105" dstip="202.12.28.131" proto="17" length="62" tos="0x00" prec="0x00" ttl="126" srcport="61280" dstport="53" 
    2013:11:27-08:04:18 dartmofw01 ulogd[5527]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="6" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.0.20" dstip="208.67.222.222" proto="17" length="66" tos="0x00" prec="0x00" ttl="126" srcport="54881" dstport="53" 
    2013:11:27-08:04:18 dartmofw01 ulogd[5527]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.5.75" dstip="74.125.228.3" proto="6" length="48" tos="0x00" prec="0x00" ttl="122" srcport="4514" dstport="443" tcpflags="SYN" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="6" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.1.27" dstip="208.67.222.222" proto="17" length="76" tos="0x00" prec="0x00" ttl="126" srcport="61017" dstport="53" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.0.161" dstip="74.125.228.1" proto="6" length="52" tos="0x00" prec="0x00" ttl="126" srcport="49266" dstport="80" tcpflags="SYN" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.0.146" dstip="74.125.228.3" proto="6" length="52" tos="0x00" prec="0x00" ttl="126" srcport="50884" dstport="443" tcpflags="SYN" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.1.146" dstip="81.18.240.138" proto="6" length="48" tos="0x00" prec="0x00" ttl="126" srcport="53558" dstport="80" tcpflags="SYN" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.1.146" dstip="81.18.240.138" proto="6" length="48" tos="0x00" prec="0x00" ttl="126" srcport="53559" dstport="80" tcpflags="SYN" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="6" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.1.27" dstip="208.67.222.222" proto="17" length="190" tos="0x00" prec="0x00" ttl="126" srcport="61982" dstport="53" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="6" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.1.27" dstip="208.67.222.222" proto="17" length="114" tos="0x00" prec="0x00" ttl="126" srcport="56735" dstport="53" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="6" initf="eth0" outitf="eth1" srcmac="0:a0:c8:7e:7f:ef" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.0.20" dstip="208.67.222.222" proto="17" length="125" tos="0x00" prec="0x00" ttl="126" srcport="53587" dstport="53" 
    2013:11:27-08:04:19 dartmofw01 ulogd[5527]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="60006" initf="eth0" srcmac="b4:b5:2f:bb:ff:b1" dstmac="0:1a:8c:17:b3[:D]8" srcip="192.9.1.14" dstip="192.9.1.231" proto="6" length="52" tos="0x00" prec="0x00" ttl="128" srcport="58292" dstport="4444" tcpflags="SYN"
Children
No Data