This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can't Connect to Particular Site from Behind Firewall (HTTPS)

I've actually run into two sites that I can't access from behind the Astaro, but the webmaster of the first site was kind enough to have instructions on adding a rule to a firewall to access their particular HTTPS site. THIS one, however...

https://www3.sctax.org/DOREPAY

Hangs when you try to access it. The Packet Filter log shows that the HTTPS traffic is going through fine (443), and there don't seem to be any issues in the HTTP content filter logs or anything. I'm guessing that there may be a non-standard port in use, but nothing's raising any flags in the packet filter that I can see.

This thread was automatically locked due to age.

Parents

0 Stupots over 17 years ago

Works here on 7.104 with proxy in standard mode.

Regards,
Stuart
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Stupots over 17 years ago

Works here on 7.104 with proxy in standard mode.

Regards,
Stuart
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 samdu over 17 years ago in reply to Stupots

Running in transparent mode on the latest firmware and the IPS is disabled.
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 17 years ago in reply to samdu

Can you access it with the proxy turned off? I access the the SCTAX site all the time as we are a SC-based LLC... never had a problem, nor have any of our SC-based customers. If you can't access it with the proxy turned off, you need to add a packet filter to allow outbound HTTPS traffic.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 samdu over 17 years ago in reply to BrucekConvergent

I'll check after business hours. As it stands, there is a packet filter rule allowing HTTPS traffic (and they can hit everything else they've tried so far).
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 17 years ago in reply to samdu

If you are using this in a business, you have Gold or Platinum support ... I'd probably start a case with Astaro support.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel