Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Adity12
Collaborator

HTTP traffic slowness when accessing web internal

Hi All,

 

On my customer site, 

There is problem when accessing web internal, the traffic is slow and even the page not displayed.

i have already check on logs there is no drop, only accept and ping to web server latency is good.

when i search for the issue, i noticed there is on log suspicious when traffic is slowness.

Here i attach that log, maybe anyone have dealt with this issue?

 

Thanks Regards

Dio Aditya Pradana 

0 Kudos
12 Replies
Ruan_Kotze
Advisor

Hi Dio,

Verify that your Website categorization mode is not set to hold.  If it is, change to background and see if things work better.  The setting lives in Manage & Settings > Blades > Application and URL Filtering > Advanced Settings

0 Kudos
Adity12
Collaborator

i see on threat prevention engine settings, there is same options like this.

is that same options?

note : name blade show in log is Anti-Bot, sorry i think this options is only one for threat prevention.

Thanks Regards

Dio Aditya Pradana

 

 

0 Kudos
the_rock
Legend
Legend

You almost got it : - ). Here is what we are referring to brother. I attached 3 screenshots for you.

Andy

 

 

0 Kudos
Adity12
Collaborator

Hi @the_rock thanks for your explanation, i will checks first on that configuration.

This default right?  i mean this options, even in my lab this options already same like your advice.

Thanks Regards

Dio Aditya Pradana

0 Kudos
the_rock
Legend
Legend

You are right, it is default, but as a test, I would change fail mode to allow, push policy and test.

Andy

0 Kudos
Adity12
Collaborator

Hi @the_rock 

i have question about checkpoint online web service, do you know any SK related to this service?

 

And i just want to make this clear, i think when traffic going through security gateway, this service will hold this traffic for categorization? i think checkpoint online web service, work like this, CMIIW

If the categorization failed the traffic will not able going to destination right? and the result on user, web server doesn't appear.

 

Thank regards

Dio Aditya Pradana

0 Kudos
Chris_Atkinson
Employee Employee
Employee

I think we're skipping over some fundamentals.

Before changing these settings can you please describe how your access & threat prevention policies are defined?

* Are URLF & AppC rules referencing a destination of internet (not any)?

* Are the web servers on the internal LAN or in the DMZ?

* What Threat Prevention exceptions do you have configured?

 

CCSM R77/R80/ELITE
0 Kudos
the_rock
Legend
Legend

I totally agree @Chris_Atkinson . @Adity12 , if you could give us more details about what Chris mentioned, it would help. 

Andy

0 Kudos
Adity12
Collaborator

@Chris_Atkinson  as far i know URLF & AppC rule is used on gateway cluster internet, and for web server is internal, am not sure about this, i will double check again.

Note: actually this case already resolved, but end user still want know the root cause this issue, so i think maybe you already see this issue before, for resolve this issue they just delete default routing from isp 2. ( they have 2 isp )

I hope thats makes sense.

 

Thanks Regards

Dio Aditya Pradana

0 Kudos
Adity12
Collaborator

Hi @Chris_Atkinson,

Sorry for late response,

I will answer your question one by one:

1. Are URLF & AppC rules referencing a destination of internet (not any)? yes, AppC & URLF referencing a destination to internet.

2. Are the web servers on the internal LAN or in the DMZ? Internal LAN

3. What Threat Prevention exceptions do you have configured? for now only exception for IPS, to allow some traffic from Internet Banking

I hope thats make sense, if not let me know.

 

Thanks Regards 

Dio Aditya Pradana

0 Kudos
the_rock
Legend
Legend

Correct, thats default setting. What is your other question?

0 Kudos
the_rock
Legend
Legend

I agree with @Ruan_Kotze . Please check that setting and correct it if needed.

Andy

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events