Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 19 replies
  • Subscribers 1 subscriber
  • Views 6610 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

categorization error

smoke455
I turned on the Content Filter for my HTTP proxy and only checked the Nudity category. All worked fine for about 5 hours and then it started blocking all websites with "categorization error". I had to uncheck all categories and reboot before it would stop blocking all sites.
Now, even with all the categories unchecked it still blocks several sites with 'categorization error' during the day. Hitting the refresh button on the browser several times makes the error go away, but this is not really an option in the middle of an online transaction.
Anyone else seen this?
I asked Astaro for help on this 2 weeks ago and no help.


This thread was automatically locked due to age.
Parents
  • 0
    That error means that astaro could not contact the database on the internet in a timely fashion, meaning it doesnt then know what category the site is.

    Are you suffering high CPU use?  Or possibly maxed out connection?
  • 0 in reply to Simon Shaw
    I'm not sure how many connections it is supposed to handle, but the reports don't show it being that high.

    Category Avg/Max
    CPU:  6.44/24.58
    Memory: 56.36/67.67
    Swap: 1.62/4.71
    root: 17.49/20.99
    log: 2.34/5.34
    storage: 4.22/4.34

    Average Connections 2.14 k
    Maximum Connections 3.17 k
  • 0 in reply to smoke455
    I've had another customer report the same issue, there is a support case started with Astaro.. if you have maintenance, I'd do the same.  My theory is that there may be a network slowdown or server issue in the region you are located (Astaro selects one of the many Surf Protection category servers based on ping time, with the idea of spreading out the load and having your ASG contact the closest unit) ...

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    I paid for platinum support - so far that has gotten me nothing but unreturned phone calls. I'll call again...
Reply Children
  • 0 in reply to smoke455
    Are you in the US?  If you are truly getting unreturned phone calls, I'd be surprised (not doubting you, just has not been our experience here).  I'd contact you reseller and complain if you are getting snubbed somehow by support, I've always found them to be quite responsive.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    yes, in the US. 4 calls in 2 weeks. They logged into the box once and said they couldn't see a problem. That was it.
    The reseller said they would get someone to call me back, but I haven't heard back from them since Monday.
    This whole experience has been very disappointing.
  • 0 in reply to smoke455
    Were the calls for this issue?  I doubt the problem is on the box itself, it's most certainly an issue with a category DB server... Try one more time, and point them at this thread... I'd be glad to back you up on this (I have had this happen myself a few times on our production ASG as well, and have one customer that has reported a similar issue), but your reseller really should be "in the game" on this...

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    all calls included this issue as well as a problem with the authentication stops working after a couple of hours. People suddenly get a login pop-up box - they put in their username/password, but it doesn't work. I have to shut-down the box and restart it to get it to work again.
    They double-checked that is was setup correctly and said they would look it into it some more.

    I tested ASL on VMWare for weeks with no problems at all - I got the appliance and its been nothing but trouble.
  • 0 in reply to smoke455
    What kind of appliance did you get?  How many users are you trying to run through it?

    I'm truly surprised that they didn't just tell you that the Authentication Daemon issue is a known issue; they are working on a fix for it, should be out in the next up2date.  The Authentication Daemon is also causing issues with SSL VPN, etc.

    Try starting a case via your my.astaro.com portal; I rarely ever call them, I use the portal to start cases, they seem to be taken care of pretty fast that way.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    its a 220 and about 60 users. Content filtering was the only add-on.

    I can see they logged into the box again this morning after my reseller got on them about it. I still haven't heard anything back tho.

    Yeah, they acted like the authentication problem was unheard of. I told them I saw it mentioned on this board. He told me he'd have to get back to me on that.

    The lack of feedback/response from Astaro on this has been very bad. 

    Thanks for the portal suggestion - I'll give that a try
  • 0 in reply to smoke455
    Your reseller can get things done --- I have a good relationship with Astaro support myself, there hasn't been much (that doesn't require the developers to create a fix in an up2date) that they haven't been able to help with.  Get your reseller to "get on them" about these things, they need to hear about experiences like yours.

    A 220 with 60 users is pushing the limits of what that box can handle... We often sell the ASG 320 in an environment like that, or a custom hardware "appliance" with a software license... is this 60 users, all the time, regular to heavy usage?  What size Internet pipe is that connected to?

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    I had the same issue today for about ten minutes.  Also had issues during that same time frame connecting to Astaro.com.  I think they may have had a brief outage.  During that time to resolve the issue, I had to add my internal network to the bypass list.
     
    Just as there is an option to configure behavior for uncategorized sites, there should also be a choice in WebAdmin for what happens when there are categorization errors.  Maybe some reseller will think this to be a good suggestion and forward it to Astaro.  ;P
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • 0 in reply to BrucekConvergent
    It is a T1/1.5 line - I'm not sure how much bandwidth is being used - I'm just going by the numbers the box shows which don't look very high.

    That really burns me to hear that - Astaro and my reseller both told me the 220 would do fine with over 100 users on content filtering. At this point I would gladly step back to the software version on my hardware.

    These are my stats on the box over that past 2 weeks
    Category Avg/Max
    CPU: 6.44/24.58
    Memory: 56.36/67.67
    Swap: 1.62/4.71
    root: 17.49/20.99
    log: 2.34/5.34
    storage: 4.22/4.34

    Average Connections 2.14 k
    Maximum Connections 3.17 k
  • 0 in reply to Scott_Klassen
     
    Just as there is an option to configure behavior for uncategorized sites, there should also be a choice in WebAdmin for what happens when there are categorization errors.  Maybe some reseller will think this to be a good suggestion and forward it to Astaro.  ;P


    I'm way ahead of you!

    I suggested this over a year and a half ago (as a feature request for Version 6.x)... it hasn't made it into production, obviously.  Maybe it's time for me to mention it again [:)]

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.