This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

error="Timeout while reading response from Server"

Hello. We are running version 9.355-1 and we have errors like:

"name="web request blocked" action="block" method="GET" srcip="internal IP" dstip="195.81.235.178" user="" ad_domain="" statuscode="504" cached="0" profile="REF_HttProContaInterNetwo (Blocked Categories)" filteraction="REF_HttCffAmyBlockCateg (Blocked Categories)" size="2567" request="0xb2de000" url="online-update-software.alcatel.com/53875160-eae5-4625-b094-32851b12ea9c.pim" referer="" error="Timeout while reading response from Server" authtime="0" dnstime="777" cattime="82301" avscantime="0" fullreqtime="61041279" device="0" auth="0" ua="OnlineUpdate" exceptions="" category="178" reputation="trusted" categoryname="Internet Services""

for some sites. I tried to run "cc set http response_timeout 120" as root, but I get the response in the attached file.

How can I run the command?

Regards



This thread was automatically locked due to age.
Parents
  • Thanks for posting your question here, George.

    statuscode="504" [...] fullreqtime="61041279" means the server doesn't play well with proxies and that the proxy timed out after sixty seconds.  If the timeout were increased, the result would be the same.  With this error, if creating an Exception for Anti-Virus for online-update-software.alcatel.com doesn't solve the problem, then you'll need to skip the proxy for that FQDN.  In Transparent mode, this is done by adding a DNS Group for the FQDN to the Transparent Mode Skiplist.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Thanks for posting your question here, George.

    statuscode="504" [...] fullreqtime="61041279" means the server doesn't play well with proxies and that the proxy timed out after sixty seconds.  If the timeout were increased, the result would be the same.  With this error, if creating an Exception for Anti-Virus for online-update-software.alcatel.com doesn't solve the problem, then you'll need to skip the proxy for that FQDN.  In Transparent mode, this is done by adding a DNS Group for the FQDN to the Transparent Mode Skiplist.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • Bob, I had several cases with my clients in the past where increasing this timeout value actually resolved the problem.

    In almost all of the cases problem was related with B2B online portals or Government sites, while searching for a query where local database services and Internet links were not optimized for a heavy traffic:

    Last time I run that command was with 9.315 firmware version, will try it in my lab environment with the latest one.