Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 1 subscriber
  • Views 10047 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Connection refused on streaming video

Brian@VCC
Hi All,

Astaro Web Gateway V7

Users are trying to access a .EDU site and can successfully, they get a connection refused error when trying to play a streaming video from the site.

I have the site whitelisted in WebSecurity>HTTP/S/URL filtering but obviously something's not correct.

2010:11:11-14:08:50 vcc-prdv-awg01 httpproxy[27652]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="10.10.15.58" user="" statuscode="502" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2286" time="1 ms" request="0xa5d5fd50" url="mms.fvtc.edu:8081/.../24YearsOfProgress.wmv
2010:11:11-14:08:50 vcc-prdv-awg01 httpproxy[27652]: [0xa5d5fd50] send_request_headers (request.c:172) write: Connection refused 

Is what I get in the log file.

Please help, thank you.


This thread was automatically locked due to age.
Parents
  • 0
    Hi, Brian, welcome to the User BB!

    statuscode="502" is the reason you were blocked; the proxy didn't purposely block you.  Have you selected 'Bypass content scanning for streaming content'?

    If that wasn't the issue, do you see any problem in the Intrusion Prevention log about 2010:11:11-14:08:50?  If not, then your best bet is to avoid the proxy for that site ('Transparent mode skiplist' if you're operating the Proxy in transparent mode).

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    Hi, Brian, welcome to the User BB!

    statuscode="502" is the reason you were blocked; the proxy didn't purposely block you.  Have you selected 'Bypass content scanning for streaming content'?

    If that wasn't the issue, do you see any problem in the Intrusion Prevention log about 2010:11:11-14:08:50?  If not, then your best bet is to avoid the proxy for that site ('Transparent mode skiplist' if you're operating the Proxy in transparent mode).

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data