This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Google Google Image dies after put ADSL and Uplink Balancing is ON

Hi All,

My System is

Astaro
Model: ASG220
Firmware version: 9.106-16
Pattern version: 51005
Authentication Mode:SSO
Joined Domain:YES
Domain Controller: Windows Server 2008
Connection : MPLS as a Primary Connection 
                  ADSL as a Second Connection to load balance  


I have some weird problem with Google, Google Search Result, Google Image.


User type http://www.google.com Google browser take so long to resolve the Googel page some user the connection refuse is show instead of Google page

Some use redirect to https://www.google.com  automatically 

if manually type  https://www.google.com is working fine

Then the user type in the word that they need to search 
Hit the search button 
The search result is shown
User click on the search result 
After click it takes so long time to show connection refuse with the Astaro logo 
check in the URL bar from https://www.google.co.th/search?q=word  
became http://www.google.co.th/search?q=word not "https" 
So the user manually put the "s" after the http and hit enter 
Bang browser bring user to the right page (a bit weird)

Another user search in the Google Image to find the nice picture.
Follow the step 
put the   https://www.google.com manually in the URL bar
click on image tap.
input the word hit enter.
Nice Picture slowing appear as a search result. 
User right click on the image select open in new tap
After click it takes so long time to show the connection refuse page with Astaro logo
Again user manually put the "s" after the http and hit enter Google redirect to the right image but some use still got the error page again

The problem above gone when I unplug the ADSL from the Astaro also over all internet it seem to faster.

I also check the ADSL is working find speed is normal.
 
What I have to check, fix ?
Please help
 
Thank you.


This thread was automatically locked due to age.
  • Open the Web Filtering Live Log and the Intrusion Prevention Live Log, then browse to Google.  Do you see anything related to the problem in either log?

    This is the first I've heard of this problem.

    Cheers - Bob
  • Hi BAlfson,
    Thank you for reply.
    The error are below after I clicked on several image result and all the link are the same.




    ======================Error in web log===============================
    2013:09:20-08:14:58 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.xx.xx" dstip="218.100.66.227" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xe3c7208" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="Connection to server timed out"
    2013:09:20-08:15:09 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.xx.xx" dstip="218.100.66.227" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xe28c240" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="Connection to server timed out"
    2013:09:20-08:15:21 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.xx.xx" dstip="218.100.66.227" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xdd28838" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="Connection to server timed out"
    2013:09:20-08:15:48 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.xx.xx" dstip="218.100.66.227" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0x981f9e0" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="Connection to server timed out"
    2013:09:20-08:15:48 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.xx.xx" dstip="218.100.66.227" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xe4cd3e0" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="Connection to server timed out"
    2013:09:20-08:15:48 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.xx.xx" dstip="218.100.66.227" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xe28c0c0" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="Connection to server timed out"
    2013:09:20-08:15:50 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.xx.xx" dstip="182.50.95.247" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xe0b8860" url="www.google.co.th/url
    2013:09:20-08:15:50 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.xx.xx" dstip="218.100.66.227" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xdc8dad0" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="Connection to server timed out"
    2013:09:20-08:15:50 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.xx.xx" dstip="218.100.66.227" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0x981fb60" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="Connection to server timed out"
    2013:09:20-08:16:04 astaro-1 httpproxy[14588]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.xx.xx" dstip="72.246.188.128" user="user-name" statuscode="200" cached="8" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="23584" request="0xdc8cc90" url="static.ddmcdn.com/.../jpeg" application="http"
    2013:09:20-08:16:05 astaro-1 httpproxy[14588]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.xx.xx" dstip="182.50.95.246" user="user-name" statuscode="200" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="4489" request="0xf021358" url="encrypted-tbn0.gstatic.com/" exceptions="" error="" category="177,178" reputation="trusted" categoryname="Content Server,Internet Services"
    2013:09:20-08:16:05 astaro-1 httpproxy[14588]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.xx.xx" dstip="182.50.95.35" user="user-name" statuscode="200" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="4491" request="0xf021ad8" url="encrypted-tbn2.gstatic.com/" exceptions="" error="" category="177,178" reputation="trusted" categoryname="Content Server,Internet Services"
    2013:09:20-08:16:05 astaro-1 httpproxy[14588]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.xx.xx" dstip="162.210.232.130" user="user-name" statuscode="200" cached="8" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xe3c6b38" url="images.wisegeek.com/.../jpeg" application="http"
    2013:09:20-08:16:06 astaro-1 httpproxy[14588]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.xx.xx" dstip="66.55.92.71" user="user-name" statuscode="200" cached="8" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xeae2ce0" url="www.hdwallpapersinn.com/.../jpeg" application="http"
    2013:09:20-08:16:22 astaro-1 httpproxy[14588]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.xx.xx" dstip="182.50.95.24" user="user-name" statuscode="200" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="5609" request="0xe0b83e0" url="www.google.com/" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:20-08:16:24 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.xx.xx" dstip="218.100.66.227" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xe084348" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="Connection to server timed out"
    2013:09:20-08:16:24 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.xx.xx" dstip="218.100.66.227" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xf02f7e8" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="Connection to server timed out"
    2013:09:20-08:16:24 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.xx.xx" dstip="218.100.66.227" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xdd26638" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="Connection to server timed out"
    2013:09:20-08:16:25 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.xx.xx" dstip="182.50.95.247" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xdc8c990" url="www.google.co.th/url
    2013:09:20-08:16:30 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.xx.xx" dstip="218.100.66.212" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="2722" request="0xdc8b6b0" url="safebrowsing.clients.google.com/.../downloads
    2013:09:20-08:16:45 astaro-1 httpproxy[14588]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.xx.xx" dstip="74.125.135.120" user="user-name" statuscode="200" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="24860" request="0xdd286b8" url="ssl.gstatic.com/" exceptions="" error="" category="177,178" reputation="trusted" categoryname="Content Server,Internet Services" 


    ===================Error page==============================


    An error occurred while handling your request
    While trying to retrieve the URL:
    http://www.google.co.th/url?sa=i&rct=j&q=&esrc=s&source=images&cd=&docid=izJU2IICr7jzUM&tbnid=UUNBpRtMkUGb6M:&ved=0CAMQjhw&url=http%3A%2F%2Fanimal.discovery.com%2Ftv-shows%2Fdogs-101%2Fvideos%2Fhavanese.htm&ei=1KE7UubNF8LHrQfh9IDQDQ&bvm=bv.52434380,d.bmk&psig=AFQjCNGnoJCFPMJgVEXaQMDCxw7SY3ArsQ&ust=1379726086201765
    The content could not be delivered due to the following condition:
    Connection to server timed out
    Your cache administrator is:
    email-address





    Please help.
    Thank you
  • Statuscode="504" indicates an incompatibility with the proxy, but http://clients1.google.com/ocsp doesn't exist.

    I didn't see  or  anywhere in the lines you posted. Please try again using those.

    Cheers - Bob
  • Hi Bob,
    What about below log?

    I am not in the office right now will try to get you the error log asap


    2013:09:20-08:16:25 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.xx.xx" dstip="182.50.95.247" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xdc8c990" url="www.google.co.th/url

    2013:09:20-08:15:50 astaro-1 httpproxy[14588]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.xx.xx" dstip="182.50.95.247" user="user-name" statuscode="504" cached="0" profile="REF_vpuDvMxsMX All User" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xe0b8860" url="www.google.co.th/url
  • using google image 
    search dog

    2013:09:23-13:21:31 astaro-1 httpproxy[5410]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xcba1798" function="auth_adir_auth_crap_callback" file="auth_adir.c" line="866" message="Authorization denied (NT_STATUS_WRONG_PASSWORD)"
    2013:09:23-13:21:31 astaro-1 httpproxy[5410]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.xx" dstip="" user="user-xx" statuscode="407" cached="0" profile="REF_vpuDvMxsMX ()" filteraction=" ()" size="2508" request="0xcba1798" url="www.google.co.th/favicon.ico" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:23-13:21:33 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.54" dstip="203.150.227.55" user="" statuscode="304" cached="0" profile="REF_HttProGameManage (Game Manager)" filteraction="REF_UtPVWQXhof (HTTP_Game_MGR_GRP)" size="0" request="0xcb6d498" url="www.settrade.com/.../Banking"
    2013:09:23-13:21:33 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.76" dstip="182.50.95.40" user="peerapat.a" statuscode="000" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_HttCffHttpgamede3 (HTTP_Game_Dev_Grp)" size="0" request="0xcbf5640" url="i1.ytimg.com/.../default.jpg" exceptions="av,content,mime" error="" category="177" reputation="trusted" categoryname="Content Server"
    2013:09:23-13:21:42 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.1.xx" dstip="182.50.95.45" user="user-xx" statuscode="000" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0x83d0c78" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:23-13:21:42 astaro-1 httpproxy[5410]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.1.xx" dstip="" user="user-xx" statuscode="407" cached="0" profile="REF_vpuDvMxsMX ()" filteraction=" ()" size="2508" request="0xcf47c28" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:23-13:21:42 astaro-1 httpproxy[5410]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="" srcip="192.168.1.xx" dstip="" user="user-xx" statuscode="400" cached="0" profile="REF_vpuDvMxsMX ()" filteraction=" ()" size="2498" request="0xcf47c28" url="" exceptions="" error="Bad request (Request line invalid)"
    2013:09:23-13:21:57 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.xx" dstip="218.100.66.236" user="user-xx" statuscode="000" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xcba1798" url="www.google.co.th/favicon.ico" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:23-13:21:57 astaro-1 httpproxy[5410]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.xx" dstip="" user="user-xx" statuscode="407" cached="0" profile="REF_vpuDvMxsMX ()" filteraction=" ()" size="2508" request="0xca8a698" url="www.google.co.th/favicon.ico" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:23-13:22:04 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.1.xx" dstip="182.50.95.45" user="user-xx" statuscode="000" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xcc24368" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:23-13:22:04 astaro-1 httpproxy[5410]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="POST" srcip="192.168.1.xx" dstip="" user="user-xx" statuscode="407" cached="0" profile="REF_vpuDvMxsMX ()" filteraction=" ()" size="2508" request="0xcb08790" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:23-13:22:04 astaro-1 httpproxy[5410]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="" srcip="192.168.1.xx" dstip="" user="user-xx" statuscode="400" cached="0" profile="REF_vpuDvMxsMX ()" filteraction=" ()" size="2498" request="0xcb08790" url="" exceptions="" error="Bad request (Request line invalid)"
    2013:09:23-13:22:12 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.1.xx" dstip="182.50.95.45" user="user-xx" statuscode="000" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xcab0648" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:23-13:22:21 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.1.xx" dstip="182.50.95.45" user="user-xx" statuscode="000" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xcb08d90" url="clients1.google.com/ocsp" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error="" 



    click one of the images result

    "www.google.co.th/url?sa=i&rct=j&q=&esrc=s&source=images&cd=&docid=qOUwCLYCHdUyOM&tbnid=llv92JFH5s0dCM:&ved=0CAMQjhw&url=http%3A%2F%2Fwww.palmerthompsonlaw.com%2Four-services%2Fdog-bites%2F&ei=Wt4_UpjMEoblrAea7ICwCg&bvm=bv.52434380,d.bmk&psig=AFQjCNHkhAKV-9xIC2c7k4uAH60c7Itg-A&ust=1380003713952189"

    2013:09:23-13:23:53 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.xx" dstip="182.50.95.34" user="user-xx" statuscode="000" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xcb9fc78" url="www.google.co.th/url
    2013:09:23-13:24:09 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.1.xx" dstip="74.125.135.120" user="user-xx" statuscode="200" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="1961" request="0xcaec858" url="ssl.gstatic.com/" exceptions="" error="" category="177,178" reputation="trusted" categoryname="Content Server,Internet Services"
    2013:09:23-13:24:09 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.1.xx" dstip="182.50.95.232" user="user-xx" statuscode="200" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="9482" request="0xcea5328" url="clients1.google.co.th/" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:23-13:24:10 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.xx" dstip="182.50.95.34" user="user-xx" statuscode="000" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xcbe7070" url="www.google.co.th/url
    2013:09:23-13:24:28 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.xx" dstip="182.50.95.34" user="user-xx" statuscode="000" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xcb0b608" url="www.google.co.th/url
    2013:09:23-13:24:28 astaro-1 httpproxy[5410]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.xx" dstip="" user="user-xx" statuscode="407" cached="0" profile="REF_vpuDvMxsMX ()" filteraction=" ()" size="2508" request="0xcb0aa90" url="www.google.co.th/url
    2013:09:23-13:24:53 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.xx" dstip="182.50.95.34" user="user-xx" statuscode="000" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xcb0aa90" url="www.google.co.th/url
    2013:09:23-13:24:53 astaro-1 httpproxy[5410]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.xx" dstip="" user="user-xx" statuscode="407" cached="0" profile="REF_vpuDvMxsMX ()" filteraction=" ()" size="2508" request="0xcb6c6b8" url="www.google.co.th/url
    2013:09:23-13:25:20 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.xx" dstip="182.50.95.34" user="user-xx" statuscode="000" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xcb6c6b8" url="www.google.co.th/url
    2013:09:23-13:25:20 astaro-1 httpproxy[5410]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.xx" dstip="" user="user-xx" statuscode="407" cached="0" profile="REF_vpuDvMxsMX ()" filteraction=" ()" size="2508" request="0xcf47aa8" url="www.google.co.th/url


    It Prompt me to input user name and password and asking again after input the right password


    Manually input https://

    "www.google.co.th/url

    It's working 

    2013:09:23-13:25:38 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.1.xx" dstip="218.100.66.236" user="user-xx" statuscode="200" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="806125" request="0xcb9e630" url="www.google.co.th/" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:23-13:27:30 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.xx" dstip="182.50.95.34" user="user-xx" statuscode="000" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xca8a518" url="www.google.co.th/favicon.ico" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:23-13:27:30 astaro-1 httpproxy[5410]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.xx" dstip="" user="user-xx" statuscode="407" cached="0" profile="REF_vpuDvMxsMX ()" filteraction=" ()" size="2508" request="0xd3c4e10" url="www.google.co.th/favicon.ico" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:23-13:27:48 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.xx" dstip="182.50.95.34" user="user-xx" statuscode="000" cached="0" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="0" request="0xd3c4e10" url="www.google.co.th/favicon.ico" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:23-13:27:48 astaro-1 httpproxy[5410]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.1.xx" dstip="" user="user-xx" statuscode="407" cached="0" profile="REF_vpuDvMxsMX ()" filteraction=" ()" size="2508" request="0x83d0c78" url="www.google.co.th/favicon.ico" exceptions="av,content,url,ssl,certcheck,certdate,mime,fileextension" error=""
    2013:09:23-13:28:06 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.xx" dstip="192.254.179.162" user="user-xx" statuscode="200" cached="8" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="14406" request="0x83d0c78" url="www.palmerthompsonlaw.com/.../html" application="http"
    2013:09:23-13:28:06 astaro-1 httpproxy[5410]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.1.xx" dstip="192.254.179.162" user="user-xx" statuscode="200" cached="8" profile="REF_vpuDvMxsMX ()" filteraction="REF_gmMWXfJFVG (HTTP_System Admin_MGR_GRP)" size="8616" request="0x83d0c78" url="www.palmerthompsonlaw.com/.../css" application="http"
  • Anat, you're throwing too many lines into your posts, so it takes too long to figure out which lines are related to the issue.  If you don't know enough about the UTM to present this problem more succinctly, I think you should have your reseller get Sophos Support involved to look at your configuration.

    Statuscode="407" or "404" is a different issue (apparently, there's an authentication issue) than the first lines you posted with "504".

    Cheers - Bob
  • Hi Bob,
    oh sorry.
    I just want to post the step by step and try to get all the information that might help to investigate.
    I am not so sure which line I should ignore. 
    If I skip some line it might lead to other issue.
    The log that you see are the results when I did something.

    Example 

    click one of the images result
    "www.google.co.th/url?sa=i&rct=j&q=&esrc=s&source=images&cd=&docid=q OUwCLYCHdUyOM&tbnid=llv92JFH5s0dCM:&ved=0CAMQjhw&u rl=http%3A%2F%2Fwww.palmerthompsonlaw.com%2Four-services%2Fdog-bites%2F&ei=Wt4_UpjMEoblrAea7ICwCg&bvm=bv.52434380 ,d.bmk&psig=AFQjCNHkhAKV-9xIC2c7k4uAH60c7Itg-A&ust=1380003713952189"

    And I copy all the log that shown in the log window

    I don't know why same link work with no ADSL but once I put ADSL on it no longer working.
  • Any ideas? 
    Or need any information ?
  • Your last sentence sounds like an MTU issue. Is it set correctly for your ISP?
  • Hi trollvottel,
    Thank you for your reply.
    I will check it out.