Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 7566 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Citrix Receiver fails due to Web Filtering

MarkThompson
I'm trying to resolve a problem with trying to use Citrix Receiver to access my work server from home.  When I use Sophos setup normally for my network I get an error message from Citrix stating it cannot connect.  So I moved my computer IP the Web Filtering Option -> Misc ->Transparent Skip List and then it works fine.  So that got me though an hour o work at home but now I want to create a rule to pass this event the next time I use Citrix.  I opened up the logwin.html file (live log for Web Protection) and the following two lines always occur when I have receive the error message.  My question is, how in the world do I make a rule from this information? 

2015:08:20-14:15:30 mark httpproxy[5302]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="http_parser_context_execute" file="http_parser_context.c" line="97" message="Unable to parse a http message of 183 bytes (HPE_INVALID_METHOD: invalid HTTP method)"





2015:08:20-14:15:30 mark httpproxy[5302]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xe2b5d000" function="read_request_headers" file="request.c" line="1540" message="unable to parse a http message on handler 81 (Success)" 


And when I place my computer in the skip list I get this message 
2015:08:20-14:31:24 mark httpproxy[5302]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.1.200" dstip="209.167.231.15" user="" ad_domain="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="4866" request="0xdeb29800" url="secure.eloqua.com/" referer="" error="" authtime="0" dnstime="1" cattime="169" avscantime="0" fullreqtime="115788296" device="0" auth="0" ua="" exceptions="" category="105" reputation="neutral" categoryname="Business" country="Canada" 

Any suggestions welcome

-Mark


This thread was automatically locked due to age.
Parents
  • 0
    severity="info" should mean that the information you want is in some other line.

    If your access is recorded in the Web Filtering log file, your computer is not in the skiplist.  I would put the public IP of the Citrix server in the Destination skiplist or the internal IP if you're connecting via VPN..

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    severity="info" should mean that the information you want is in some other line.

    If your access is recorded in the Web Filtering log file, your computer is not in the skiplist.  I would put the public IP of the Citrix server in the Destination skiplist or the internal IP if you're connecting via VPN..

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML