After IronPort upgrade - GATEWAY_TIMEOUT,

[Svein Tjemsland]

Hi

We have a rising issue where our users do not reach various websites without any apparent reason. The Policy trace suggests that everything is ok, but they end up getting a

"

GATEWAY_TIMEOUT,

"

in their web browser whenever they try. We recently upgraded to the latest-n-greatest IronPort on our

S360´s (v7.1.3-014 for Web) and M160 (v7.7.0-202) and after that the trouble began. We have filed a bug report with Cisco without getting any sensible answers, in fact we have no answers at all.

Anyone else out there with similar experiences ?

stj.

[ravmadir]

The GATEWAY_TIMEOUT error typically indicates that the IronPort Proxy device is unable to connect to the URL requested by the client. You can verify this by performing a telnet test to the destination URL from CLI of the IronPort applaince.If the telnet test fails it is an indication that IronPort request is blocked by an upstream device or IronPort did not recive a timely response from the upstream server.

Sample Telnet test from CLI

------------------------------------------

wsa.csw> telnet

Please select which interface you want to telnet from.

1. Auto

2. Management (10.0.60.21/24: wsa02.csw)

[1]> 2

Enter the remote hostname or IP address.

[]> www.google.com

Enter the remote port.

[25]> 80

Trying 172.XX.XX.XX

========

[Svein Tjemsland]

That is basic error testing and as such has already been tried.

stj.

[Svein Tjemsland]

To follow-up myself, it was an internal network error at our own systems, it took some serious debugging to discover this and we are greatful for Cisco IronPort Support for helping us out.

stj.