Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 119 replies
  • Subscribers 1 subscriber
  • Views 291350 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[9.200] Web filtering causing slow internet browsing?

Jimstigator
I upgraded to 9.200 a few weeks ago and noted no decrease in internet browsing speed.  The unit is a 320 with max 100 users behind it.  Most features turned on, including IPS and now ATP.  

As of the past few days, browsing is... SLOWWWW.  All of a sudden, sites with lots of images, say, a shopping website, are extremely slow to load.  I went in, turned Web Filtering off, and boom, right back to instant load.  Anyone else experiencing this?

As far as the web filtering config, pretty much default.  Transparent mode, single scan, only block p0rn, all other traffic allowed.

I rebooted the UTM which didn't help.
Thoughts? 

-Jim


This thread was automatically locked due to age.
  • 0
    I would check the various system logs.  I had one client with this issue and it was the isp equipment..but no logs bore it out...once i convinced them to replace their gear everything went back to normal.  I highly doubt it is the webfilter..i could be wrong as i'm not looking at the machine in question..[:)]
  • 0 in reply to William Warren
    Hey William,

    I hear you, but what explains it?  If web filtering is off, browsing is lightning fast.  If its on, there is a noticeable delay.  Seems like ISP issue would effect it, with complete disregard for the UTMs web filter settings.

    -Jim
  • 0
    Which sites are slow?  I'd like to test it here..it could be a bug in web filter or something else.
  • 0 in reply to William Warren
    Post the aaccording proxy loglines of a slow site. The new Debug infos in the log may help evaluate the reason of slowines...
  • 0 in reply to William Warren
    Anything... all websites.  A few to note were apple.com, nordstrom.com, zappos.com.  I am just naming ones I was randomly using.  Even coming to astaro.org has a 3-6 second load time with the filter on.

    The site below excellent example.  With filter on, the shoe images load slow as hell, slower than the speed at which a normal user would scroll to view them.  With filter off, its instant.  And I don't just mean that single page, but any page on the site... its not that browser cache is speeding things up for the second go-around.

    Men's Shoes | Allen Edmonds
  • 0 in reply to Sascha Paris
    Post the aaccording proxy loglines of a slow site. The new Debug infos in the log may help evaluate the reason of slowines...


    Sorry, not sure what you mean.  Just the log line items from the web filter as I am browsing?

    If you are asking for that, whats the best way to display log files in here?  Copy and paste doesn't seem to be it.
  • 0 in reply to Jimstigator
    whats the best way to display log files in here?  Copy and paste doesn't seem to be it.


    Hi,

    Pull up the FULL log (not the Live log) - Logging & Reporting - Log Files

    Copy the relevant lines.

    Paste here; surround them with CODE tags (the # sign in the menu, or the word CODE with square brackets around it).

    Barry
  • 0
    I have 60 UTMs running in the field - I have this issue on 5 of these sites, chronic slow speeds until web filtering is switched off. I have logged this with Sophos support which is foxing them too!!!! It's not an ISP or settings issue - I think it's an issue somewhere on the Sophos network as I understand we filtering filters all the traffic through the Sophos servers before landing on your screen???
  • 0 in reply to tomellis6680
    Here is a quick shot of me turning it on, going to a few sites, then turning off. 

    2014:03:28-08:46:40 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="270" message="reading configuration"

    2014:03:28-08:46:40 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="583" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"

    2014:03:28-08:46:40 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="3300" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"

    2014:03:28-08:46:40 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="291" message="reading profiles"

    2014:03:28-08:46:40 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_zap" file="diskcache.c" line="449" message="creating cache"

    2014:03:28-08:46:40 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="adir_auth_init" file="auth_adir.c" line="1089" message="gss_acquire_cred host/pp-secondary@ERC.LOCAL: No such file or directory"

    2014:03:28-08:46:41 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="aptpscanner.c" line="171" message="ATP loaded"

    2014:03:28-08:46:41 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_load_list" file="scr_scanner.c" line="1296" message="failed to load list"

    2014:03:28-08:46:42 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs01.astaro.com' access time: 271ms"

    2014:03:28-08:46:43 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs02.astaro.com' access time: 237ms"

    2014:03:28-08:46:43 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs03.astaro.com' access time: 147ms"

    2014:03:28-08:46:43 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs04.astaro.com' access time: 226ms"

    2014:03:28-08:46:43 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs05.astaro.com' access time: 242ms"

    2014:03:28-08:46:43 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs06.astaro.com' access time: 89ms"

    2014:03:28-08:46:43 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs07.astaro.com' access time: 140ms"

    2014:03:28-08:46:44 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs08.astaro.com' access time: 402ms"

    2014:03:28-08:46:44 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs09.astaro.com' access time: 357ms"

    2014:03:28-08:46:45 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs10.astaro.com' access time: 455ms"

    2014:03:28-08:46:45 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs11.astaro.com' access time: 290ms"

    2014:03:28-08:46:49 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scanner_init" file="saviscanner.c" line="256" message="Successfully loaded SAVI threat data, engine 3.50.1, threat data 4.98 from 12/2/2014 (6466477 detected threats)"

    2014:03:28-08:46:49 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs14.astaro.com' access time: 204ms"

    2014:03:28-08:46:49 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="340" message="finished startup"

    2014:03:28-08:46:49 PP-Secondary httpproxy[15866]: Integrated HTTP-Proxy (c) 2007-2014 Sophos Ltd, Release 57.g96afa7e

    2014:03:28-08:46:50 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs15.astaro.com' access time: 518ms"

    2014:03:28-08:46:50 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs16.astaro.com' access time: 385ms"

    2014:03:28-08:46:51 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs17.astaro.com' access time: 545ms"

    2014:03:28-08:46:51 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs18.astaro.com' access time: 240ms"

    2014:03:28-08:46:51 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs19.astaro.com' access time: 255ms"

    2014:03:28-08:46:51 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs20.astaro.com' access time: 236ms"

    2014:03:28-08:46:52 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs21.astaro.com' access time: 243ms"

    2014:03:28-08:46:52 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs22.astaro.com' access time: 265ms"

    2014:03:28-08:46:52 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs23.astaro.com' access time: 48ms"

    2014:03:28-08:46:52 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs24.astaro.com' access time: 247ms"

    2014:03:28-08:46:52 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs25.astaro.com' access time: 201ms"

    2014:03:28-08:46:53 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs26.astaro.com' access time: 387ms"

    2014:03:28-08:46:53 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_check_servers" file="scr_scanner.c" line="820" message="server 'cffs27.astaro.com' access time: 244ms"

    2014:03:28-08:46:53 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.113" dstip="74.113.233.48" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xeb7c660" url="search.tb.ask.com/.../redirect.jhtml

    2014:03:28-08:46:58 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.156" dstip="50.19.239.174" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="43" request="0xe99bdc0" url="ping.chartbeat.net/ping

    2014:03:28-08:46:58 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.113" dstip="23.73.180.243" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="196" request="0xeb7d760" url="csm80-en.url.trendmicro.com/.../html" application="http"

    2014:03:28-08:46:58 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.71" dstip="74.125.228.3" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="35" request="0xec9f100" url="www.google-analytics.com/__utm.gif

    2014:03:28-08:46:58 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.129" dstip="50.19.239.174" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="43" request="0x94c9100" url="ping.chartbeat.net/ping

    2014:03:28-08:46:58 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.89" dstip="204.107.64.30" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="301" request="0xec9e000" url="dnorman.earthcam.net/.../archive_weather_vars.php

    2014:03:28-08:46:58 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.71" dstip="63.251.19.11" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="712" request="0xc3d6aa0" url="api.cdn.liquidcompass.net/.../search.json

    2014:03:28-08:46:58 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.156" dstip="159.54.233.28" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="44893" request="0xc3d7ba0" url="search.delmarvanow.com/sp

    2014:03:28-08:46:59 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.113" dstip="166.67.66.140" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="66096" request="0xeb7cee0" url="www.virginiadot.org/.../pdf" application="http"

    2014:03:28-08:46:59 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.3.142" dstip="159.182.164.92" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xe99acc0" url="threadcontent.next.ecollege.com/.../Reference"

    2014:03:28-08:46:59 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.3.142" dstip="159.182.164.92" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0x94c9980" url="threadcontent.next.ecollege.com/.../Reference"

    2014:03:28-08:46:59 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="192.168.3.142" dstip="159.182.164.92" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xe99a440" url="threadcontent.next.ecollege.com/.../Reference"

    2014:03:28-08:46:59 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.156" dstip="159.54.227.176" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="43" request="0xef6e440" url="cmsimg.gmti.com/.../bilde

    2014:03:28-08:46:59 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.156" dstip="74.125.228.16" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="597" request="0xef6fdc0" url="www.google.com/.../afs

    2014:03:28-08:46:59 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.156" dstip="74.125.228.16" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2186" request="0xeb7d100" url="www.google.com/.../afs

    2014:03:28-08:46:59 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.156" dstip="184.51.150.195" user="" statuscode="204" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xf04e220" url="b.scorecardresearch.com/b

    2014:03:28-08:46:59 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.113" dstip="166.67.66.140" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="318" request="0xeb7cee0" url="www.virginiadot.org/.../x-icon" application="http"

    2014:03:28-08:46:59 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.156" dstip="66.235.138.194" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="43" request="0xefa7760" url="gpaper168.112.2o7.net/.../s04848679835099

    2014:03:28-08:46:59 PP-Secondary httpproxy[15866]: id="0064" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden file extension detected" action="block" method="GET" srcip="192.168.3.156" dstip="23.79.13.223" user="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2597" request="0x94c8cc0" url="www.delmarvanow.com/.../flXHR.vbs" exceptions="" error="" authtime="0" dnstime="50542" cattime="47986" avscantime="0" fullreqtime="201970" device="0" auth="0" category="134" reputation="neutral" categoryname="General News" application="http" reason="extension" extension="vbs" filename="flXHR.vbs"

    2014:03:28-08:46:59 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.156" dstip="23.79.13.223" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1786" request="0x94c8aa0" url="www.delmarvanow.com/.../slider.js

    2014:03:28-08:46:59 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.156" dstip="206.191.168.170" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2239" request="0xefa6ee0" url="js.revsci.net/.../gw.js

    2014:03:28-08:47:00 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.156" dstip="206.191.168.170" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="585" request="0x94c9320" url="pix04.revsci.net/.../pcx.js

    2014:03:28-08:47:00 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.156" dstip="206.191.168.170" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="43" request="0xc3d6440" url="pix04.revsci.net/.../19288943.gif

    2014:03:28-08:47:01 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.207" dstip="74.125.228.16" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="358" request="0xef02220" url="www.google.com/url

    2014:03:28-08:47:01 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.71" dstip="74.125.228.3" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="35" request="0xec9f100" url="www.google-analytics.com/__utm.gif

    2014:03:28-08:47:01 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.207" dstip="174.35.22.63" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="14903" request="0xc3d6cc0" url="www.mrporter.com/.../html" application="http"

    2014:03:28-08:47:01 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.207" dstip="174.35.22.63" user="" statuscode="304" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xc3d6cc0" url="www.mrporter.com/.../Beauty" application="http"

    2014:03:28-08:47:01 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.207" dstip="174.35.22.63" user="" statuscode="304" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xc3d7540" url="www.mrporter.com/.../Beauty" application="http"

    2014:03:28-08:47:01 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.207" dstip="174.35.22.63" user="" statuscode="304" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xe99a880" url="www.mrporter.com/.../Beauty" application="http"

    2014:03:28-08:47:01 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.207" dstip="174.35.22.63" user="" statuscode="304" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xe99a660" url="www.mrporter.com/.../Beauty" application="http"

    2014:03:28-08:47:01 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.207" dstip="174.35.22.63" user="" statuscode="304" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xc3d7dc0" url="www.mrporter.com/.../Beauty" application="http"

    2014:03:28-08:47:01 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.207" dstip="174.35.27.72" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="10722" request="0xe99b760" url="cache.mrporter.com/.../jpeg" application="http"

    2014:03:28-08:47:01 PP-Secondary httpproxy[15866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.3.207" dstip="74.125.228.3" user="" statuscode="304" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xec9f320" url="www.google-analytics.com/ga.js" exceptions="" error="" authtime="0" dnstime="69" cattime="47621" avscantime="0" fullreqtime="96509" device="0" auth="0" category="178" reputation="neutral" categoryname="Internet Services" application="googanal"

    

    2014:03:28-08:47:37 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_reload_func" file="confd-client.c" line="710" message="reloading config"

    2014:03:28-08:47:37 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="parse_address" file="util.c" line="583" message="getaddrinfo: passthrough6.fw-notify.net: Name or service not known"

    2014:03:28-08:47:37 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_filter" file="confd-client.c" line="3300" message="failed to resolve passthrough6.fw-notify.net, using 2a01:198:200:680::8080"

    2014:03:28-08:47:38 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_loop" file="epoll.c" line="858" message="starting exit cleanup"

    2014:03:28-08:47:38 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="confd_config_reload_func" file="confd-client.c" line="751" message="reloading config done, new version 43"

    2014:03:28-08:47:38 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scan_exit" file="scanner.c" line="578" message="scanner subsystem shutting down"

    2014:03:28-08:47:39 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="scan_exit" file="scanner.c" line="584" message="scanner subsystem shut down"

    2014:03:28-08:47:39 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_exit" file="epoll.c" line="679" message="epoll subsystem shutting down"

    2014:03:28-08:47:39 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="epoll_exit" file="epoll.c" line="694" message="epoll subsystem shut down"

    2014:03:28-08:47:39 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_exit" file="diskcache.c" line="44" message="writing cache index"

    2014:03:28-08:47:39 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="disk_cache_exit" file="diskcache.c" line="46" message="writing cache index done"

    2014:03:28-08:47:39 PP-Secondary httpproxy[15866]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="main" file="httpproxy.c" line="375" message="shutdown finished, exiting"
  • 0
    Do you have IPv6 enabled?
    There are errors regarding "passthrough6.fw-notify.net", which is the fake adress for the Proxy message pages (IPv6).

    Also the "cattime" and "avscantime" values are much too high, it seems the categorization is taking a looong time (not usual).
    There seems to be a problem with reaching the categorization site in a valuable time...