Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 47 replies
  • Subscribers 1 subscriber
  • Views 28820 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

"Timeout while reading response from Server"

UweT
Hi there,

Astaro's web filter is getting a pain in the neck. It causes more and more frustration.

Right now we have a class of students in a room who have to do an exam/a test online using www.coa2.co.uk (Java based).

Some students want to finish the test, some others want to access the website and the Astaro comes up with a client error window in the browser: "Timeout while reading response from Server".

Reviewing the web filter log I even see different URLs having that problem: 


2012:02:03-11:23:18 disgwac httpproxy[6111]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="172.16.2.42" dstip="194.168.43.38" user="" statuscode="502" cached="0" profile="REF_KbKfywLeRp (School)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xa3a1330" url="www.coa2.co.uk/.../" exceptions="av,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension" error="Timeout while reading response from Server"

2012:02:03-11:23:18 disgwac httpproxy[6111]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="172.17.9.11" dstip="67.195.187.57" user="" statuscode="502" cached="0" profile="REF_mLsJvVcVuk (WLAN-CommunityRoom)" filteraction="REF_iKcUWRpPYS (CommunityRoom_Action)" size="5293" request="0x6d301a30" url="prod1.rest-notify.msg.yahoo.com/.../uta_siebert

2012:02:03-11:24:51 disgwac httpproxy[6111]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="172.16.2.129" dstip="94.100.179.72" user="asachechelashvili" statuscode="502" cached="0" profile="REF_KbKfywLeRp (School)" filteraction="REF_jufcKIaXDn (Students_Action)" size="4835" request="0x8432d1a8" url="jim12.mail.ru/connect


These are just 3 examples of many lines repeating in similar form.

The website above I had/have already excluded from everything: AV Scanning, URL ContentFiltering... but it doesn't help.

Do you have any suggestions?

Sincerely,
Uwe


This thread was automatically locked due to age.
Parents
  • 0
    I still think the issue is name resolution, but a comment on your 100%.  Depending on how much your users are using the web and how you have IPS configured, 400 users could be too much.  You might want to go through IPS and unclick the things you don't need on the 'Attack Patterns' tab.

    Cheers - Bob
Reply
  • 0
    I still think the issue is name resolution, but a comment on your 100%.  Depending on how much your users are using the web and how you have IPS configured, 400 users could be too much.  You might want to go through IPS and unclick the things you don't need on the 'Attack Patterns' tab.

    Cheers - Bob
Children