Ironport WSA online backup failure

[Spaniard141]

Our online backup started to fail connection to the vendor's server about a month ago. In grepping the server in question, I can see a lot of messages with the destination server listed but I am not sure what they mean.

Can someone explain what this means or point me in the right direction?

1412602184.000 5788 X.X.X.X TCP_DENIED/502 0 TCP_CONNECT 38.81.66.191:443 - DIRECT/38.81.66.191 - DECRYPT_ADMIN_2-NONE-AllNetworks-NONE-NONE-NONE-DefaultGroup <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-",0.00,0,-,"-","-"> -

I think that the TCP_Denied/502 means bad gateway although it is a valid address and I can access it and telnet to port 443 but I don't know what the rest means DECRYPT_ADMIN_2=NONE

Thanks in advance

[Ken Stieers · Accepted solution]

Its going through the HTTPS proxy, the bad gateway message is what's killing it.

If I were you, I'd put the IP of your on-premise backup box in the Bypass list so the WSA doesn't see it at all.  You KNOW where that box is going, and you know what its doing, little need to filter it through the WSA.  That's putting a ton of load on the WSA you don't need.

[Spaniard141]

Thanks for your comments. I forgot I had opened this discussion a while back. This turned out to be an authentication issue.