Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 7 replies
  • Answers 1 answer
  • Subscribers 40 subscribers
  • Views 4164 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

InactiveRpcError when using Sophos FW

Imesh Liyanage

A few users in our network use Python & Java scripts to connect to some services on AWS. The scripts work fine when bypassing the Sophos FW or using mobile hotspots. But when using Sophos the users see errors like this in their terminals:

Exception has occurred: _InactiveRpcError
<_InactiveRpcError of RPC that terminated with:
	status = StatusCode.UNAVAILABLE
	details = "failed to connect to all addresses; last error: UNAVAILABLE: ipv4:x.x.x.x:80: Connection timed out"
	debug_error_string = "UNKNOWN:failed to connect to all addresses; last error: UNAVAILABLE: ipv4:x.x.x.x:80: Connection timed out {grpc_status:14, created_time:"2023-08-29T11:22:07.56380364+00:00"}"
>
  File "C:\Users\imesh\Desktop\fw_test.py", line 27, in <module>
    qid = cursor.execute('select * from date_dim limit 3')
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
grpc._channel._InactiveRpcError: <_InactiveRpcError of RPC that terminated with:
	status = StatusCode.UNAVAILABLE
	details = "failed to connect to all addresses; last error: UNAVAILABLE: ipv4:x.x.x.x:80: Connection timed out"
	debug_error_string = "UNKNOWN:failed to connect to all addresses; last error: UNAVAILABLE: ipv4:x.x.x.x:80: Connection timed out {grpc_status:14, created_time:"2023-08-29T11:22:07.56380364+00:00"}"
>

In the firewall logs, I see a few denied packets with this error: Could not associate packet to any connection.

Any idea what could be causing this?



This thread was automatically locked due to age.
Parents
  • 0

    Hi  Please check the below thread suggested settings and solution if that works for you here for this error:

    community.sophos.com/.../https-timeout

    Regards,

    Vishal Ranpariya
    Technical Account Manager | Sophos Technical Support
    Sophos Support Videos | Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts |
    If a post solves your question use the 'Verify Answer' link.

  • 0 in reply to Vishal_R

    Hi , I changed these settings and the timeout seems to be solved by now the connection gets reset.

    The users said that this connection uses http/2 & gRPC protocols

      File "C:\Users\imesh\AppData\Local\Programs\Python\Python311\Lib\site-packages\grpc\_channel.py", line 1004, in _end_unary_response_blocking
    raise _InactiveRpcError(state)  # pytype: disable=not-instantiable
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
grpc._channel._InactiveRpcError: <_InactiveRpcError of RPC that terminated with:
        status = StatusCode.UNAVAILABLE
        details = "failed to connect to all addresses; last error: UNAVAILABLE: ipv4:x.x.x.x:80: Connection reset"
        debug_error_string = "UNKNOWN:failed to connect to all addresses; last error: UNAVAILABLE: ipv4:x.x.x.x:80: Connection reset {created_time:"2023-08-30T09:38:13.3250284+00:00", grpc_status:14}"

Reply
  • 0 in reply to Vishal_R

    Hi , I changed these settings and the timeout seems to be solved by now the connection gets reset.

    The users said that this connection uses http/2 & gRPC protocols

      File "C:\Users\imesh\AppData\Local\Programs\Python\Python311\Lib\site-packages\grpc\_channel.py", line 1004, in _end_unary_response_blocking
    raise _InactiveRpcError(state)  # pytype: disable=not-instantiable
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
grpc._channel._InactiveRpcError: <_InactiveRpcError of RPC that terminated with:
        status = StatusCode.UNAVAILABLE
        details = "failed to connect to all addresses; last error: UNAVAILABLE: ipv4:x.x.x.x:80: Connection reset"
        debug_error_string = "UNKNOWN:failed to connect to all addresses; last error: UNAVAILABLE: ipv4:x.x.x.x:80: Connection reset {created_time:"2023-08-30T09:38:13.3250284+00:00", grpc_status:14}"

Children
Unfiltered HTML