|
Posted by Security Freak on February 14, 2007, 7:54 pm
If you were Registered and logged in, you could reply and use other advanced thread options On Wed, 07 Feb 2007 13:23:44 -0500, Default User
>
>>HI all.
>>Dear we are using a lot of SWG2 appliances as proxies for filtering.
>>
>>some time we got the following errors:
>>
>>"ERROR
>>Access Denied
>>
>>--------------------------------------------------------------------------------
>>
>>Access Denied by security policy
>>The security policy for your network prevents your request from being
>>allowed at this time. Please contact your administrator if you feel
>>this is incorrect.
>
>Are you using smartfilter? If so, you may need to adjust your application
>defenses or possibly reconfigure allowed sites within smartfilter.
>
>
>>and some times
>>
>>ERROR
>>Proxy Error
>>________________________________________
>>The proxy encountered an error.
>>Please try again later.
>
>You may need to adjust the number of proxy connections allowed for the
>proxy; it's possible that you simply don't have enough proxies configured
>to handle the traffic.
>
>
>>does any body face it before?
>>what does those errors mean? and is there a feature that will help to
>>get the details of the box which is causing that issues?
>
>man showaudit
>and/or
>use the audit viewing function within cobra.
When this is happening do the following
cf set loglevel=4
tcpdump -npi (interneal interface em1) -s 1500 -X -w filename
while this is running trying accessing the site that that is giving
you trouble. When you get the "Access Denied"
do a ctl c
start another ssh to the firewall and do a
acat -ak
Look for the "Access Denied"
review the filename for any denies.
Don't forget to reset
cf set loglevel=2
Cheers.
|