cancel
Showing results for 
Search instead for 
Did you mean: 

Admin Console Disconnection Problem

Hi,

      When I am trying to save and changes from my firewall using the console I am always being disconnected. I saw some logs that might be relevant or could be the exact error log of the problem. Please help me interpret the logs below and what could be the cause of the error.  Thank you.

2012-07-27 18:37:59 +0800 f_admin_console a_libproxycommon t_attack p_major

pid: 1920 logid: 0 cmd: 'scobrap' hostname: xxx.xxx.local

category: protocol_violation event: SSL session error

netsessid: 25c7050124fa8 src_geo: PH srcip: xxx.xxx.xxx.xxx srcport: 1356

srczone: external dst_local_port: 9003 protocol: 6 src_local_port: 0

dstip: 127.0.0.1 dstport: 9002 dstzone: Firewall attackip: xxx.xxx.xxx.xxx

attackzone: external rule_name: Admin Console-External

ssl_name: <Admin Console SSL Traffic> - Admin Console External

reason: The SSL session failed.  This may be a configuration error, or it may be an attempt to subvert the protocol.  Connection closed.

information: SSL_read

Operation timed out

2012-07-27 18:37:59 +0800 f_admin_console a_libproxycommon t_error p_major

pid: 1920 logid: 0 cmd: 'scobrap' hostname: xxx.xxx.xxx.xxx

information: -9|Bad file descriptor

pc_cb_process_read_data: Error during client read. Closing session.

2012-07-27 18:37:59 +0800 f_admin_console a_libproxycommon t_servtraffic p_major

pid: 1920 logid: 0 cmd: 'scobrap' hostname: xxx.xxx.xxx.xxx

event: server traffic end application: Admin Console

netsessid: 25c7050124fa8 src_geo: PH srcip: xxx.xxx.xxx.xxx srcport: 1356

srczone: external protocol: 6 dst_geo: PH dstip: xxx.xxx.xxx.xxx

dstport: 9003 dstzone: Firewall bytes_written_to_client: 1032955

bytes_written_to_server: 44493 rule_name: Admin Console-External

cache_hit: 0

ssl_name: <Admin Console SSL Traffic> - Admin Console External

start_time: 2012-07-27 16:22:00 +0800

2012-07-30 11:03:41 +0800 f_admin_console a_libproxycommon t_error p_major

pid: 2015 logid: 0 cmd: 'scobrap' hostname: xxx.xxx.xxx.xxx

information: -9|Bad file descriptor

pc_cb_process_read_data: Error during client read. Closing session.

2012-07-30 11:03:41 +0800 f_admin_console a_libproxycommon t_servtraffic p_major

pid: 2015 logid: 0 cmd: 'scobrap' hostname: xxx.xxx.xxx.xxx

event: server traffic end application: Admin Console

netsessid: d33aa5015f8d3 src_geo: PH srcip: xxx.xxx.xxx.xxx srcport: 1358

srczone: external protocol: 6 dst_geo: PH dstip: xxx.xxx.xxx.xxx

dstport: 9003 dstzone: Firewall bytes_written_to_client: 17876

bytes_written_to_server: 3708 rule_name: Admin Console-External

cache_hit: 0

ssl_name: <Admin Console SSL Traffic> - Admin Console External

start_time: 2012-07-30 11:00:35 +0800

1 Reply
mtuma
Level 13
Report Inappropriate Content
Message 2 of 2

Re: Admin Console Disconnection Problem

Hello,

The error Error during client read. Closing session. usually points to a device prematurely closing the conneciton with a reset. I believe a tcpdump on port 9003 on the client interface would be helpful.

Can you also clarify if this is an immediate disconnect or if the client "times out"?

If you try a client running on another machine, do you have the same issue?

We may want you to open a support ticket if we need to collect debug information.

-Matt