Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[sicruise]

I have an ARP entry in place for the public IP of the web server.

I have the following rules in place to allow access to the webserver over port 443 for https access.

1      https_inbound_map      SAT      any      all-nets      core      wan1_ip      https
2     https_inbound_allow     Allow     any             all-nets     core     wan1_ip     https

HTTPS works for most people communicating but some customers are consistently not able to complete SSL handshake. It appears that packets are being dropped, there is no logging relating to transactions on our web server so we have to assume that traffic is not getting that far when it is not working.

It is not related to the location of the customer as they may be able to access via a browser but when performing a HTTPS Post their connection is being dropped.

Is there anything I'm missing?

[danilovav]

1. Change any to wan1
2. Please show logs with drop

[Fatman]

Your IP rules can be turned on for logging individually and this will provide some of the logs we need.

What is your WAN MTU and what type of ISP do you have?

Why do you have an ARP entry, you don't need one to host services on wan1_ip?