This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Guest WIFI network not working properly. Some apps not receiving data.

Josema over 4 years ago

Equipment:

Sophos Firewall SG230 (UTM9)

Firmware version: 9.701-6

Access point AP-15

Issue:

I have connected several AP to my network, generated 2 wifi networks, 1 bridged to my LAN working fine and another (guest wifi) in a separate zone:

The devices (mostly mobile phones) connect to this network with no problem. The web surfing works great, no problem at all. I have this firewall rule:

I detected a problem with Iphone activation, it throws an "activation server is unavailable". If I connect to another wifi it works fine. After this incident I have detected some more abnormal behaviour:

1.- Twitter app doesn't update, but the notification works. After opening the app the updating icon moves until a message appear "Cannot retrieve messages at this time, please try again later."

2.- Netflix app doesn't work. You can choose your profile but after that it shows nothing. (screenshot below)

The weird thing is that I can login to twitter or watch netflix from a web browser in a device connected to the same wifi (guest). So it clearly is a problem with the mobile apps.

Any hints to solve this problem?

Thanks in advance.

This thread was automatically locked due to age.

Parents

0 Jaydeep over 4 years ago

Hi Josema

Have you checked the packetfilter.log at the time when the issue happens? I assume you are not applying web filtering on the Separate zone network. If you have applied Web Filtering, what do you see there?

Regards

Jaydeep
Cancel
Vote Up 0 Vote Down

Cancel
0 Josema over 4 years ago in reply to Jaydeep

Yes, I've checked packetfilter.log, and there is a something I don't understand (but IMO not related with the issue), this (my phone is 10.10.10.9):

But after those DROP all seems working fine:

If I open Twitter or Netflix I don't see anything about in the log.

I'm not applying web filtering on the guest wifi network.
Cancel
Vote Up 0 Vote Down

Cancel
0 Jaydeep over 4 years ago in reply to Josema

Have you configured Anti-DoS/Flooding in UTM? It looks like a reason for those drops.

Regards

Jaydeep
Cancel
Vote Up 0 Vote Down

Cancel
0 Josema over 4 years ago in reply to Jaydeep

Hi Jaydeep,

No Anti-DoS/Flooding:

Some "Attack patterns" checked:

I have unchecked all to test and no change.
Cancel
Vote Up 0 Vote Down

Cancel
0 Jaydeep over 4 years ago in reply to Josema

IPS settings look alright to me.

I suspect this might be with CDN networks for the Apps. But it would require to look into tcpdump of the traffic when the issue occurs. Please capture a PCAP of the iPhone from UTM 9 as per this article Sophos UTM: How to capture packets and download the Packet Capture. Check it in Wireshark and see if anything comes up.

Regards

Jaydeep
Cancel
Vote Up 0 Vote Down

Cancel
0 Josema over 4 years ago in reply to Jaydeep

I have done this test with an android phone and Netflix app.

I think this is the interesting part but don't know interpret it:

I have uploaded the file to https://ufile.io/hgapu2ds
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Josema over 4 years ago in reply to Jaydeep

I have done this test with an android phone and Netflix app.

I think this is the interesting part but don't know interpret it:

I have uploaded the file to https://ufile.io/hgapu2ds
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data