10061 Connection refused

Question

Sophos UTM 9 
 I'm having an issue with an application that I wrote. It connects to a web service by the city of Vienna under the address http://data.wien.gv.at/ or IP 217.149.229.21:80 . When I run the application on a machine that is configured to use the Sophos proxy, I get the error 10061 "connection refused". When I run the application on a machine that connects directly to the Internet using our Cisco ASA Firewall, it works fine. 
 Here is the basic configuration: 
 
 I tried to find log entries including the above IP address, but didn't find any, neither in Webfilter log nor in the Firewall or Web Application Firewall log. 
 Where can I search for log entries concerning blocked connections?

emmosophos · Answer

Hello there, 
 Thank you for contacting the Sophos Community. 
 It seems your query is related to Sophos UTM, so I am moving this thread to that group. 
 If you&rsquo;re using the UTM as a Proxy, you will find information under the http.log 
 Additionally to this, you could try to bypass the UTM Web Proxy by adding the destination IP under Web Protection >> Filtering Options >> Misc >> Transparent Mode Skiplist >> Skip Transparent Mode Destination Hosts/Networks, to help you narrow down if is the Web Filter that is blocking the connection. 
 Regards,

BAlfson · Answer

Hallo Anne - first I've seen you post here - welcome to the UTM Community! 
 It looks like data.wien.gv.at has a TTL of less than five minutes. That means that the "Stadt Wien" Host definition needs to be replaced by a DNS Host definition in the Transparent Mode Skiplist. 
 However, if your server is explicitly using the Web Proxy (Standard mode), the Skiplist does not apply and you will need to configure the server to skip the Proxy for data.wien.gv.at. 
 Cheers- Bob

VW@S · Answer

Thank you both for your help!
Finally it turned out that the machines configured to use the Sophos proxy tried to access http://data.wien.gv.at directly over the Cisco ASA firewall, which refused the connection. I had to explicitly configure the Sophos proxy in my app's configuration file and now it works.
Thanks again, Anne