topic Socket read time out error in Network Security

Socket read time out error

mulugojjam abebe — Mon, 11 Mar 2019 21:01:33 GMT

Hello,

I face a problem on timeout. there are two servers one in DMZ and the other on the inside network. Those servers continously communicate and after a long hour, like 10 hrs, socket read time out error occured. When I move the DMZ server to the inside network it works perfectly. Access rule is configured from DMZ server to the inside and vice versa.

So if there is something on timeout that should be configured on the firewall please advice.

Thank you in advance

Mulu

Socket read time out error

varrao — Thu, 21 Jul 2011 11:11:28 GMT

Hi,

could you just provide an output of show run from the ASA, please also do collect the logs from the time when such a disconnect happensd from the ASA.

Thanks,

Varun

Socket read time out error

mulugojjam abebe — Fri, 22 Jul 2011 08:50:07 GMT

Thank you Varun for your fast response.

This is the wierd thing. The servers communicate on day time(working hours) perfectly. but the error occurs during night time(off hours). There are no logs on the ASA, may be the problem is due to idel time out connection. Is there any default behaviour on the ASA that will stop when the connection between the servers is idle(no session). The servers are Weblogic and database servers.

Thank you

Socket read time out error

varrao — Fri, 22 Jul 2011 09:03:24 GMT

Hi,

Yes there is a an ideal timeout behavior set on the firewall , but you would need to check the values, for that you can do:

show run timeout

this would tell you all the timeout values set on the firewall for connection timeouts. I would still suggest to check the logs and server setting as well, in the logs if you can see that the built connection was teared down due to timeout and after that the user send a packet for that connection, then the ASA would definitely drop it and hence the error message that you get. On the server you can check if it is sending keepalives for the idle connection so that the connection doesn't time out.

Hope this helps you out.

Thanks,

Varun

Socket read time out error

mulugojjam abebe — Fri, 22 Jul 2011 11:59:03 GMT

Thank You Varun,

Hope it will solve it. I will check it today and i will be back to you.

Thank you

Mulu

Socket read time out error

mulugojjam abebe — Mon, 25 Jul 2011 12:12:59 GMT

Thank you Varun,

Its solved. The problem was on idel timeout. I appreciate your great help.

Thank you

Mulu

Socket read time out error

mulugojjam abebe — Wed, 03 Aug 2011 07:52:10 GMT

Dear Varun,

I have faced one problem on the SSL Clientless vpn. It gives me Socket write error when i connect to the server through SSL, but i map the server with public IP and access it directly and at this time the error disappears. Any configuration the i can tune on the SSL configuration.?

Thank you