Hi,
I've been trying to set up Proxy Profiles onthe AWG4000 model we purchased, and I'm not able to determine where it's going wrong by looking at the log output.
I successfully set up A/D and have pre-fetched users in a group. I know that authentication is working, and the device is joined to the domain.
I set up a proxy profile that looks at traffic coming from my subnet, and allows me to access sites, except for one, I blocked Facebook. I set up the default fallback action to block any access. I'm using my own account to access the profile.
When I use the AWG as a proxy and hit Facebook, I get the message that connection is refused. When I hit Google, I again get the message that the connection is refused.
I'm trying to determine the cause, whether it's not authenticating me properly and using the fallback, or some other issue.
In the HTTP Content filter log I see this pattern repeated
First this:
2009:03:17-13:54:42 SHAWG4000A httpproxy[4222]: [ 0x80ccfb0] send_request_headers (request.c:167) write: Connection refused
Then my username and source IP in another message:
2009:03:17-13:54:42 SHAWG4000A httpproxy[4222]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="172.16.16.208" user="gmoonadm" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2919" time="4966 ms" request="0x80ccfb0" url="www.facebook.com/" exceptions="" error="Connection refused" category="9999" categoryname="Categorization failed"
Then a series of 5 of the following messages:
2009:03:17-13:54:42 SHAWG4000A httpproxy[4222]: [ (nil)] sc_handle_cmd (scr_scanner.c:510) write: Connection refused
Then, another one of these as it can't pull up the search page:
2009:03:17-13:54:42 SHAWG4000A httpproxy[4222]: [ 0x80ccfb0] sc_categorize_url (scr_scanner.c:939) no categorization received for url: www.facebook.com - Google Search
2009:03:17-13:54:42 SHAWG4000A httpproxy[4222]: [ 0x80ccfb0] send_request_headers (request.c:167) write: Connection refused
2009:03:17-13:54:42 SHAWG4000A httpproxy[4222]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="172.16.16.208" user="gmoonadm" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="3129" time="60 ms" request="0x80ccfb0" url="http : //www.google.com/search? q=www .facebook.com&rls=com.microsoft:*&ie=UTF-8&oe=UTF-8&startIndex=&startPage=1" exceptions="" error="Connection refused" category="9999" categoryname="Categorization failed"
And now, I've found this same result no matter what proxy rules I set. I also disabled checking for uncategorized sites, but this didn't make a difference.
Can someone shed some light on this "Connection refused" message? I have verified with our network administrator that he's not blocking any ports on the External interface of the AWG 4000, and that 1500 MTU is probably a good setting.
Thanks
This thread was automatically locked due to age.
