Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Closed Forums (read only) > ASG V7.500 BETA (closed)

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

 
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 05-31-2009, 08:26 AM
Senior Member
 
Join Date: Jul 2006
Posts: 159
Default [7.450] BUG: HTTP-Proxy with HTTPS enabled -> OWA not working, no HTTPS -> OWA works

[/CODE]Hi,

with SSL scanning enabled I'm not able to access OWA - if i disable SSL it's working.
I don't even get the logon page....

HTTPS scanning ENABLED
Code:
2009:05:31-11:32:08 beta httpproxy[3669]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="10.254.0.1" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="305 ms" request="0x81106f8" url="https://removed/" exceptions="" error="" category="134" reputation="neutral" categoryname="General News" 
2009:05:31-11:32:08 beta httpproxy[3669]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="10.254.0.1" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="177 ms" request="0x81106f8" url="https://removed/" exceptions="" error="" category="134" reputation="neutral" categoryname="General News" 
2009:05:31-11:32:11 beta httpproxy[3669]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="10.254.0.1" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="156 ms" request="0x81106f8" url="https://removed/" exceptions="" error="" category="134" reputation="neutral" categoryname="General News" 
2009:05:31-11:32:11 beta httpproxy[3669]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="10.254.0.1" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="151 ms" request="0x8114140" url="https://removed/" exceptions="" error="" category="134" reputation="neutral" categoryname="General News" 
2009:05:31-11:32:11 beta httpproxy[3669]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="301" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="31 ms" request="0x81106f8" url="https://removed/" exceptions="" error="" reputation="neutral" category="134" reputation="neutral" categoryname="General News" content-type="text/html" 
2009:05:31-11:32:11 beta httpproxy[3669]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="4" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="172 ms" request="0x81106f8" url="https://removed/exchange" exceptions="" error="" category="134" reputation="neutral" categoryname="General News" 
2009:05:31-11:32:11 beta httpproxy[3669]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="404" cached="4" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1635" time="210 ms" request="0x81106f8" url="https://removed/exchange&reason=0" exceptions="" error="" category="134" reputation="neutral" categoryname="General News" content-type="text/html"
HTTPS scanning DISABLED
Code:
2009:05:31-11:34:29 beta httpproxy[3669]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="10.254.0.1" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="5312" time="476 ms" request="0xb0c26b48" url="https://removed/" exceptions="" error="" category="134" reputation="neutral" categoryname="General News" 
2009:05:31-11:34:47 beta httpproxy[3669]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="10.254.0.1" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="7003" time="19541 ms" request="0xb0c09bd8" url="https://removed/" exceptions="" error="" category="134" reputation="neutral" categoryname="General News" 
2009:05:31-11:34:47 beta httpproxy[3669]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="10.254.0.1" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="48046" time="19692 ms" request="0xb0c12138" url="https://removed/" exceptions="" error="" category="134" reputation="neutral" categoryname="General News" 
2009:05:31-11:34:47 beta httpproxy[3669]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="10.254.0.1" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="25442" time="21767 ms" request="0xb0c054b8" url="https://removed/" exceptions="" error="" category="134" reputation="neutral" categoryname="General News"

Using IE8 (compatibility mode ON)

Last edited by Microsaft; 05-31-2009 at 08:32 AM.
  #2 (permalink)  
Old 05-31-2009, 01:40 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 4,952
Default

Microsaft, are you sure you don't have your samples reversed? Both if them show all "pass" but the second one shows that small files are taking 20 seconds.

Cheers - Bob
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
  #3 (permalink)  
Old 05-31-2009, 02:55 PM
Senior Member
 
Join Date: Jul 2006
Posts: 159
Default

Hi BAlfson,

no the samples should be correct ;-)

But following lines are interesting:
Code:
2009:05:31-17:49:40 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="267 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526reason=0%2526reason=0%26reason=0&reason=0" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:40 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="214 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526reason=0%2526reason=0%26reason=0&reason=0" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:40 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="225 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%25252525252525252525252526reason=0%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526reason=0%2526reason=0%26reason=0&reason=0" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:40 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="264 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%2525252525252525252525252526reason=0%25252525252525252525252526reason=0%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526reason=0%2526reason=0%26reason=0&reason=0" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:41 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="193 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%252525252525252525252525252526reason=0%2525252525252525252525252526reason=0%25252525252525252525252526reason=0%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526reason=0%2526reason=0%26reason=0&reason=0" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:41 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="210 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%25252525252525252525252525252526reason=0%252525252525252525252525252526reason=0%2525252525252525252525252526reason=0%25252525252525252525252526reason=0%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526reason=0%2526reason=0%26reason=0&reason=0" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:41 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="204 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%2525252525252525252525252525252526reason=0%25252525252525252525252525252526reason=0%252525252525252525252525252526reason=0%2525252525252525252525252526reason=0%25252525252525252525252526reason=0%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526reason=0%2526reason=0%26reason=0&reason=0" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:41 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="240 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%252525252525252525252525252525252526reason=0%2525252525252525252525252525252526reason=0%25252525252525252525252525252526reason=0%252525252525252525252525252526reason=0%2525252525252525252525252526reason=0%25252525252525252525252526reason=0%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason=0%2525252526reason=0%25252526reason=0%252526re" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
2009:05:31-17:49:42 beta httpproxy[3620]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.254.0.1" user="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" time="223 ms" request="0x8085510" url="https://webmail.domain.removed/exchange/%25252525252525252525252525252525252526reason=0%252525252525252525252525252525252526reason=0%2525252525252525252525252525252526reason=0%25252525252525252525252525252526reason=0%252525252525252525252525252526reason=0%2525252525252525252525252526reason=0%25252525252525252525252526reason=0%252525252525252525252526reason=0%2525252525252525252526reason=0%25252525252525252526reason=0%252525252525252526reason=0%2525252525252526reason=0%25252525252526reason=0%252525252526reason" exceptions="" error="" category="119" reputation="neutral" categoryname="Health"
Looks like that there's something added -the URL get's longer and longer....
  #4 (permalink)  
Old 06-12-2009, 03:07 PM
nitehawk's Avatar
Administrator
 
Join Date: May 2008
Location: Karlsruhe, Germany
Posts: 215
Default

Microsaft, can I get more details of your configuration?
Have you imported the Proxy Signing CA? Is it with OWA only or is with every single SSL-connection (HTTPS website)?

Thanks in advance!
  #5 (permalink)  
Old 06-12-2009, 03:44 PM
Senior Member
 
Join Date: Jul 2006
Posts: 159
Default

Hi,

no I didn't imported the CA.
Onlinebanking is working (SSL), tried another OWA-Website which is also failing to connect.

rgds

#edit#
Have importet the CA now - no change (tried using FF & IE)

Last edited by Microsaft; 06-13-2009 at 06:59 AM.
  #6 (permalink)  
Old 06-19-2009, 06:46 AM
Senior Member
 
Join Date: Jul 2006
Posts: 159
Default

.... is working in 7.460
  #7 (permalink)  
Old 06-24-2009, 07:03 PM
 
Join Date: Jun 2009
Posts: 0
Default

Code:
Astaro Beta Report
--------------------------------
Version: 7.450
Type: BUG
State: FIXED
Reporter: Microsaft
Contributor: 
MantisID: 
--------------------------------

Last edited by andyk007; 07-16-2009 at 07:52 AM.
  #8 (permalink)  
Old 07-16-2009, 07:52 AM
Wizard
 
Join Date: Dec 2006
Posts: 653
Default

we released a new http/s proxy in 7.460

Greetings
Andreas
 

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 10:46 PM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.