This seems to be affecting all OSX Macs on campus...
Strange issues with the proxy have developed since upgrading to 7.5 around Christmas. Its taken me awhile to quantify it.
Computers affected: All OSX Macs
Browser used: all browsers
Other conditions: Proxy only, if packet filter is added allowing everything for the mac, and proxy is removed, mac works fine
Initially it seemed like it was a problem with HTTPS - most of the time sites requiring authentication using https will not go anywhere after entering credentials. Yet sometimes it works. I've had two Macs side by side and one will go through and the other will not - both using the same browser.
Its not solely HTTPS however because the page 'gmail.google.com' loads but after entering credentials, it goes nowhere. Sometimes other sites are affected. One good example is by simply going to 'http:/.../S Content log on the astaro - in other words, the example of going to yahoo.com has no entry in the log for yahoo it only lists the last page visited before yahoo.com was browsed to in the browser. Again this doesn't happen all the time or on all Macs but occasionally. Issues with HTTPS occur much more frequently.
Sometimes yahoo.com or youtube.com will eventually come up but it will be text only with no formatting or images.
I have done packet traces by mirroring the private port of the astaro and capturing all traffic from the mac host. I have these logs available if anyone is interested. The only defining characteristic is line after line of:
10.2.1.198 (mac) >> 10.1.1.1 (astaro) HTTP [TCP Retransmission] Continuation or non-HTTP traffic
OR
10.2.1.198 >> 10.1.1.1 SSLV3 [TCP Retransmision] Application DATA
Windows computers work fine! And in the interest of full disclosure this is just happening on one of our subnets so I'm open to other things being the cause. But since I can trace the traffic flowing all the way up to the Astaro and windows computers are working fine, I'm not sure where to go with this.
I have HTTPS scanning disabled.
This thread was automatically locked due to age.
