Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 2 subscribers
  • Views 12483 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to access a certain website

addy sharma

Hello Team,

 

We are having issues accesing a particular website from behind our firewall SOPHOS UTM.

When contacted support the guy told me that it is taking more than the fulreqtime defined internally on sophos and hence it is getting dropped with an error message "Connection to server Timed Out".

We checked with our ISP which is Orange and they confirmed that there is no such issue.Also when we try browsing that website from anywhere else the page loads up in less than a second hence I really do not understand how could the ISP be the cause and that too specefically with my firewall. Below are the logs :

 

2017:09:26-15:05:54 sg650n1-1 httpproxy[30103]: "id=0002 "severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="1x.x.x.7x" dstip="164.2.244.26" user="" group="" ad_domain="" statuscode="504" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0xc1a3c000" url="www.aphp.fr/favicon.ico" referer="" error="Connection to server timed out" authtime="0" dnstime="128" cattime="94" avscantime="0" "fullreqtime=60882640 "device="0" auth="0" ua="Mozilla/5.0 (Windows NT 10.0; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0" exceptions=""

 

Please help.



This thread was automatically locked due to age.
Parents
  • 0

    Hi, Addy, and welcome to the UTM Community!

    When you see a statuscode in the 500 range, the first thing to try is an Exception for Antivirus.  If that doesn't work, you must skip the proxy for the site in question.

    Cheers - Bob

  • 0 in reply to BAlfson

    Hello Bob,

     

    Thank you for the response. I tried that by looking on your other posts but even bypassing the AV or un selecting the proxy under web filtering did not help. Apparently the support guys told me that it is the fullreqtime which is been met and hence the traffic is dropped. He somehow thinks that this is an issue with the ISP but its kindda not very convincing that a web site which is opening in less than a second from outside the network is dropped by sophos due to high response time.

    And just to be sure the proxy that you are talking about is the  one under Web protection > Web Filtering and then the https tab >>>" Do not proxy HTTPS traffic in transparent mode"

    I will look forward to your feedback.

    Thanks,

    Addy

Reply
  • 0 in reply to BAlfson

    Hello Bob,

     

    Thank you for the response. I tried that by looking on your other posts but even bypassing the AV or un selecting the proxy under web filtering did not help. Apparently the support guys told me that it is the fullreqtime which is been met and hence the traffic is dropped. He somehow thinks that this is an issue with the ISP but its kindda not very convincing that a web site which is opening in less than a second from outside the network is dropped by sophos due to high response time.

    And just to be sure the proxy that you are talking about is the  one under Web protection > Web Filtering and then the https tab >>>" Do not proxy HTTPS traffic in transparent mode"

    I will look forward to your feedback.

    Thanks,

    Addy

Children