Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 3 subscribers
  • Views 20858 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

parent proxy with auth - how to debug?

miami_01

Hi All,

i'm using the parent proxy for some websites, which should be routed through an external proxy server.

this worked for a long time now. Yesterday i needed changed the external proxy (squid3) to user authentication, because of several reasons. if i use the etxernal proxy from a browser, he aks for the credentials and that works fine.

I gave the astaro the necessary credentials in the parent proxy config, but i see in the webfilter log, that it doesn't routes to the parent proxy. So i assume it has something todo with the auth of the external proxy.


has somebody a similar issue, and where do i find a log to debug this issue?

Kind regards,

Oliver



This thread was automatically locked due to age.
Parents
  • 0

    Oliver, please 'Use rich formatting' to insert a picture of your Parent Proxy configuration.  Also, show the lines in your Web Filtering log that demonstrate that the traffic is not going to the Parent Proxy.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Hello Bob,


    here the Konfig of the parent proxy within the webfilter:

    and here is the corresponding webfilter log:

    these connections should go to the external proxy (104.46.X.X) but don't do.

    So i'm searching for any kind of log, where i can see, why the the parent proxy isn't used.

    Thanks for your help!

    Oliver

Reply
  • 0 in reply to BAlfson

    Hello Bob,


    here the Konfig of the parent proxy within the webfilter:

    and here is the corresponding webfilter log:

    these connections should go to the external proxy (104.46.X.X) but don't do.

    So i'm searching for any kind of log, where i can see, why the the parent proxy isn't used.

    Thanks for your help!

    Oliver

Children
  • 0 in reply to miami_01
    Does it work for *.ytimg.com requests?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    unfortunately not. Any suggestions?

    Oliver
  • 0 in reply to miami_01

    Is it possible that the "HOST AZ-Proxy" definition violates #3 in Rulz?


    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Hello Bob,

    no i never bound Definitions to interfaces. This Definition has 'Any' for interface.

    Cheers - Oliver
  • 0 in reply to miami_01
    How about the Web Filtering log line (not a picture) when *.ytimg.com is not directed to the Parent Proxy?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Hello Bob,


    looks like this:

    2016:02:12-09:46:25 XXX httpproxy[6114]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.X.X" dstip="80.156.86.78" user="" ad_domain="" statuscode="302" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="255" request="0xdb1a8000" url="http://www.ytimg.com/" referer="" error="" authtime="0" dnstime="29722" cattime="60672" avscantime="0" fullreqtime="153795" device="0" auth="0" ua="" exceptions="av,cache,fileextension" category="177" reputation="trusted" categoryname="Content Server" content-type="text/html" application="youtube" app-id="557"

    the dstip should the the parent proxy, that's my problem i don't see anything about the parent proxy.

    Cheers - Oliver

  • 0 in reply to miami_01
    Interesting, I can't even get name resolution on that FQDN. Do you know what 80.156.86.78 is?

    Change *.youtube.* to *.youtube.com and do the same experiment.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Hello Bob,

    the problem isn't related to the filter config. The filter worked already for about one year. only as i had the need to configure the parent proxy with auth. the problem occured.

    Regards, Oliver
Unfiltered HTML