This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Website not opening after working before

I have a client that was able to open a government website until just recently. Now when we try to open the site it comes back with err_connection_timed_out error. I checked the policies and ran a policy tester against the site and it is allowed. They were able to get to the site for about a week a couple weeks ago but a reboot on the firewall stopped the connection. Bypassing the firewall straight to the ISP modem gets the site right away. I was thinking certificate. I have been on the phone with TS about this multiple times. I am just checking if anyone else has had this issue with an HTTPS site.

This thread was automatically locked due to age.

0 rfcat_vk over 2 years ago

Hi,

does your firewall rule use DPI or proxy? Please post a copy and advise what version of XG software you are running.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 2 years ago
Hello Jeff Boucher,

Thank you for reaching out to the community, if it is shown as allowed in Policy test tool, follow these steps:

Check the drop-packet-capture for the traffic and find why it is being dropped.

Check for any value in drop-packet-capture which might indicate an issue with the traffic.

Do a TCPDUMP and see for any connection error from the webserver.
Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Jeff Boucher over 2 years ago in reply to rfcat_vk

DPI. We are on an XG230 (SFOS 19.0.1 MR-1-Build365). I ran wireshark through the connection to the site, but my inexperience is showing through here with TCPDUMP and the results. Hence why i am in here looking for assistance.
Cancel
Vote Up 0 Vote Down

Cancel