cancel
Showing results for 
Search instead for 
Did you mean: 

Strange behaviour on large file upload

Hi anyone have any idea about this one.

Our customer is uploading a file to a site over https using their activex upload wizard. At this stage there are no exceptions in our rule base for the site. We are using the standard SSL scanner rule.

File 1 is 6mb in size, auto generated from a backend system as a csv. It uploads OK and passes the file integrity check. During tracing I noted the following values:

Media type from HTTP header = text/plain

Enshured media type = application/x-empty

Supported by opener = false

File 2 is 30mb in size, auto generated from a backend system as a csv. It appears to upload OK but after the file integrity check I get a failure message 404. Again during tracing I noted the following values:

Media type from HTTP header = text/html

Enshured media type = text/html

Supported by opener = true

The only way I can get the large file to upload is by tunnelling the site.

0 Kudos
5 Replies
alexott
Level 11

Re: Strange behaviour on large file upload

Hi

Which version are you using? 7.3.2? I assume that these values are from response cycle, not request?

Can you capture the both request & response (as network traces) see - is request sent to remote server, or the error happens during processing inside MWG?

0 Kudos

Re: Strange behaviour on large file upload

Hi alex, running 7.2.0.8.0 (14873)

I have recreated issue and ran tcp dump on the appliance. How can I get it to you?

Cheers

0 Kudos
alexott
Level 11

Re: Strange behaviour on large file upload

Hi Iain

please, contact support and provide all data..

thank you

0 Kudos
McAfee Employee

Re: Strange behaviour on large file upload

Post the SR and I can relay it to alex (if he hasnt got it already).

Best,

Jon

0 Kudos

Re: Strange behaviour on large file upload

Ticket number 3-3170343343

TCP dump, rule engine files and feedback uploaded

0 Kudos