Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 1228 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Citrix and astaro... very slow connetion

equintana
Hi,


I´ve been testing astaro for some months... and very good experience.

Last thing to check is connecting citrix. I tried to connect to https://tpa.repsol.com... whitelisted at http proxy...but using astaro is very very very slowwwwwwwww!!!!


Why?

PD: any good company to buy ASG?
regards


This thread was automatically locked due to age.
  • 0
    Hi,

    At packet filter log I can see a default drop from lan ip computer to serverip:443

    I dont understand this because I added a top rule  lan to this ip 443 allow always.


    why?
  • 0
    Hi, which mode are you using the proxy in? Https won't go through the proxy in the default mode, in which case you'd need a packetfilter rule such as:
    source: LAN
    Dest: any
    service: https
    Allow

    Barry
  • 0
    Hi,

    Of course, I added a rule  lan to this ip(repsol) https allow, but when I log the connection, I can see a DEFAULT DROP and the connection is dropped. This new rule is the 1st(top).

    Http mode...transparent FULL
  • 0
    I suspect you need to put the DNS Host definition for tpa.repsol.com in the 'Transparent mode skiplist' on the 'Advanced' tab of HTTP/S.

    Also, the "Full Transparent" mode means the Proxy doesn't masq the LAN address with the "External (Address)," so you won't want that if the Astaro is your gateway unless you have public IPs in your LAN.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA