This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WAF Webserverprotection Problem

I have a problem with the UTM9 Firmware 9.707-5 Pattern version:  204432

We have a web portal, but users are being disconnected at 9:30 Pm every day . In the log i'm seeing several errors.


2021:10:29-21:56:16 fw httpd[3068]: [proxy:error] [pid 3068:tid 3785116528] AH00959: ap_proxy_connect_backend disabling worker for (Server IP Address) for 60s

2021:10:29-21:56:16 fw httpd[3068]: [proxy_http:error] [pid 3068:tid 3785116528] [client 197.197.134.166:59877] AH01114: HTTP: failed to make connection to backend: Server IP Address

any ideas

???



This thread was automatically locked due to age.
  • That is usually an error you see with Apache webservers, MySQL needing to be restarted, or needing to add a 'retry=0' to to the config if its a VM.

    OPNSense 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
    16GB Memory | 500GB SSD HDD | ATT Fiber 1GB
    (Former Sophos UTM Veteran, Former XG Rookie)

  • The web app on sharepoint  and we use MSSQL all on VMs. So where i add the 'retry=0' 

    Where in UTM ?

  • It wouldn't go in the UTM, it's for VM host configurations.  I don't know your setup and offered that as a possible solution.  If you are using a hardware device specific for a UTM, I don't know that UTM itself has a command line config for the same thing.

    OPNSense 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
    16GB Memory | 500GB SSD HDD | ATT Fiber 1GB
    (Former Sophos UTM Veteran, Former XG Rookie)

  • Hala Mohamed and welcome to the UTM Community!

    I agree with Amodin that this is not a problem in the UTM, rather in the web app or server.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA