WSA proxy question?

[360rundll]

Hi, All

                Recently，I meet some imnormal status like capture that 2 PCs proxyed WSA access some websites , but visit that websites normally after bypass. But I found the logs that it is allow status. Meanwhile other PCs proxyed by WSA access that websites normally. I can not judge if WSA problem. Who can give me some ideas?  THX!

[Handy Putra]

are both PCs going to the same WSA appliance?

From the screenshot, looks like the PC that experiencing issue has lost connection to the WSA on port 8080.

Maybe you can check the connectivity from that PC to the WSA appliance (check the network connectivity to the WSA listening port).

Also would suggest to open TAC case to get further assistance and further investigation.

[360rundll]

Yes, it's the same WSA. We have ony one WSA. But 2-3 PCs have that issue, other normal. Meanwhile, 2-3 PCs bypass WSA is normal, too.

Maybe you can check the connectivity from that PC to the WSA appliance (check the network connectivity to the WSA listening port).

How to check? 2-3 PCs telnet WSA' IP 8080? THX!

[Handy Putra]

How is your proxy deployment method and how the PCs pass the traffic to WSA? is it using WCCP redirection or point directly to the WSA address and port from the internet browser proxy setting (if yes make sure the WSA address is correct and also the port) or using PAC/WPAD file? if using PAC/WPAD file, check the file to see any specific rules for those client address

From that PC you can perform basic network tests such as ping, telnet to the WSA to see any connection. Also from WSA CLI you can also do ping back to client address.

[360rundll]

PCs point directly to the WSA address and port from the internet browser proxy setting.

Because it happen suddenly. OK, I will try your opinion after issue hasspening. THX!

[Handy Putra]

not a problem