Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 11 replies
  • Subscribers 1 subscriber
  • Views 5245 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

No Downloads possible with Caching-Proxy in front of Astaro

XACT
Hi,
we are using a Caching-Only-Proxy (Squid on Windows 2003) in front of our ASG320 (7.405). The Squid authenticates the users against ActiveDirectory and forwards the HTTP-traffic to the Astaro. The Astaro's HTTP-Proxy is running in standard mode with Dual-Virus-Scanning and Content-Filtering enabled.

The problem is, if a users wants to download a file from the internet, he only gets the Astaro-Download-Screen from "passthrough.fw-notify.net" but the progress-bar does not move and nothing happens. 

If the user connects to the Astaro directly bypassing the Squid-Proxy, the download works - but without the Astaro-Download-Screen...

Is there something misconfigured or is this a bug? How can we fix this?

Thanks in advance!


This thread was automatically locked due to age.
Parents
  • 0
    Responding to one of your questions in your first post in this thread: The Astaro download screen only appears if the Astaro calculates that the time needed to perform the download is larger than "x" seconds (not sure about the exact number).  A file is not A-V scanned if it's larger than the max scan size, so if you have that set to a small number, like 10MB, you may have a fast-enough download speed that you never trigger the message.

    Like I said, I think your problem is in the Squid box - maybe there's a user bulletin board for it that you can get an answer from.

    It sounds like you're trapped between Scylla and Charybdis - Good luck!

    Cheers - Bob
    PS Have you considered putting the Squib box between the ASG and your ISP?

    PPS You might read https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/44161
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    Responding to one of your questions in your first post in this thread: The Astaro download screen only appears if the Astaro calculates that the time needed to perform the download is larger than "x" seconds (not sure about the exact number).  A file is not A-V scanned if it's larger than the max scan size, so if you have that set to a small number, like 10MB, you may have a fast-enough download speed that you never trigger the message.

    Like I said, I think your problem is in the Squid box - maybe there's a user bulletin board for it that you can get an answer from.

    It sounds like you're trapped between Scylla and Charybdis - Good luck!

    Cheers - Bob
    PS Have you considered putting the Squib box between the ASG and your ISP?

    PPS You might read https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/44161
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data