This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Server time out errors when browsing from specific internal IP

Hello,

Sorry probably another newbie question.

I have users working on two different networks, their machines either sit on a 10.121.1.*** or a 192.168.8.*** IP.

using UTM as a proxy, users in the 192.168.8.*** network can browse the net fine.
Users on the 10.121.1.*** network get 'connection to server timed out' message (status could 504 in the logging) for normal browsing, if they try to go to a site blocked by a policy, they recieve the stand content blocked message. So I know their traffic is hitting the utm.

Is it possible that the UTM isnt allowing connections on the 10.121.1.*** network to pass through it?

Am a little confused.

Edd...

This thread was automatically locked due to age.

0 BAlfson over 10 years ago

Edd, what happens if you put the "(Network)" objects for the two LANs into the 'Skip transparent mode destination hosts/nets' skiplist?

Cheers - Bob
PS Then again, is your issue Accessing Internal or DMZ Webserver from Internal Network?
Cancel
Vote Up 0 Vote Down

Cancel
0 SupraEdd over 10 years ago

Thanks for the reply Bob.

Sorry I'm still a little green to all this. Where do I find the 'Skip transparent mode destination hosts' option?

Thanks again,

Edd...
Cancel
Vote Up 0 Vote Down

Cancel
0 SupraEdd over 10 years ago

This is what appears in the webfilter log each time:

"2015:02:18-11:53:13 vutm201p-2 httpproxy[5723]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="10.121.48.113" dstip="216.58.208.67" user="testuser" ad_domain="ukoffice" statuscode="504" cached="0" profile="REF_HttProContaInterNetwo (SSO)" filteraction="REF_HttCffLimitAcces (Limited Access)" size="2508" request="0xe79af800" url="google.co.uk/.../5.0)" exceptions="" category="145" reputation="trusted" categoryname="Search Engines" application="google" app-id="182"
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 10 years ago

Do you have any SNAT or Uplink Balancing going on that might affect http traffic from the 10. subnet? Do you see anything related to 216.58.218.195 (google.co.uk) in the Firewall or Intrusion Prevention log?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 10 years ago

Where do I find the 'Skip transparent mode destination hosts' option?
Web Protection > Filtering Options > Misc
Cancel
Vote Up 0 Vote Down

Cancel
0 SupraEdd over 10 years ago

Thanks, Im not seeing anything in the intrusuion prevention log. the firewall log has 'default drop' on icmp messages, but they dont reference the goodgle ip at all.

I have added the network object for the 10.121.48.*** inoto the skip transparent mode destination host and this makes no difference.

The SNAT could be a possibitly. I will ask our ISP who runs our routers etc if they have this applied.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 10 years ago

I meant a NAT rule in your UTM. You confirm that you're not doing Uplink Balancing and have only a single WAN connection?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 SupraEdd over 10 years ago

No we dont have any NAT rules on the UTM. and we do only have the single wan connection.

very confusing.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 10 years ago

Please let us know what Sophos Support finds when they look at your UTM.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 SupraEdd over 10 years ago

Thats I will contact them, I guess I must have some support during the 30 day trail.
Cancel
Vote Up 0 Vote Down

Cancel