cancel
Showing results for 
Search instead for 
Did you mean: 
adabicee
Level 7

Web Gateway 7 Timeout

Jump to solution

How long does the Web Gateway wait before timing out a request to a website? Is it possible to change the timeout value? Where?

0 Kudos
1 Solution

Accepted Solutions
dstraube
Level 11

Re: Web Gateway 7 Timeout

Jump to solution

Hello,

there is a global connection timeout that defaults to 120 seconds. This can be changed:

timeout.jpg

The connection timeout can be changed in a rule with 7.1.0, so you can set different timeouts based on different servers. That is done via the Event "Enable Workaround <timeouts>":

timeout2.jpg

I hope this is what you are looking for.

Regards,

Dirk

0 Kudos
9 Replies
jont717
Level 12

Re: Web Gateway 7 Timeout

Jump to solution

Good question, I was wondering also.  Sometimes we get Timeout Erros, Page cannot be found messages when submitting forms.  Mostly when ording products or purchasing online flight tickets.  These are all HTTPS sites.  There must be some type of timeout where it is killing these connections instead of waiting. 

Help!

0 Kudos
dstraube
Level 11

Re: Web Gateway 7 Timeout

Jump to solution

Hello,

there is a global connection timeout that defaults to 120 seconds. This can be changed:

timeout.jpg

The connection timeout can be changed in a rule with 7.1.0, so you can set different timeouts based on different servers. That is done via the Event "Enable Workaround <timeouts>":

timeout2.jpg

I hope this is what you are looking for.

Regards,

Dirk

0 Kudos
phlrnnr
Level 9

Re: Web Gateway 7 Timeout

Jump to solution

Thank you very much - this was very helpful!  I've been testing this, and at first I could not get it to work.  I had created a rule in the 'Common Rules --> Handle Special Sites' Ruleset that followed Dirk's instructions above.  However, when testing it, the site would still time out after 120 seconds.  I then noted that the 'Handle Special Sites' ruleset only runs in the 'Responses' cycle (I believe that is default behavior).  So, I moved my rule into a different ruleset that runs in the 'Requests' cycle, and it worked perfectly.

So, it appears that any rule to extend the timeout for a specified connection must be run in the 'Request' cycle.

0 Kudos

Re: Web Gateway 7 Timeout

Jump to solution

Hi, does anyone know if changing the connection timeout from 120 to 900seconds has an impact on the performance?

0 Kudos
McAfee Employee

Re: Web Gateway 7 Timeout

Jump to solution

Hi Renata,

Changing it globally is probably a bad idea, but changing it on a site-by-site basis is alright. This can be done with the Proxy Control event.

Best Regards,

Jon

0 Kudos

Re: Web Gateway 7 Timeout

Jump to solution

Thanks for the response, I will reconfigure it, because it is basically for one website.

Is the global solution bad because of security (eg DoS because of too many tcp connections?) or because of performance reasons?

0 Kudos
McAfee Employee

Re: Web Gateway 7 Timeout

Jump to solution

Hi Renata,

It's because of performance reasons, if connections are kept open, theoretically more resources are tied up waiting for those resources to become active.

Best Regards,

Jon

0 Kudos

Re: Web Gateway 7 Timeout

Jump to solution

Ok, would this be right?:

Is there a recommendation where to put this kind of rule? I would put it in a ruleset which is only called in the request cycle, eg under "URL Filtering" even if its not really filtering..

Or I could create a separate ruleset:

What do you think is the better design and would cost less performance? I think the 2nd one

Thanks very much!

0 Kudos
johnaldridge
Level 10

Re: Web Gateway 7 Timeout

Jump to solution

On version 7.5.2.7 there is nothing called "Enable Workarounds".  The closest thing would seem to be creating something new under "Proxy Control".

0 Kudos