Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
854 Views 9 Replies Latest reply: Jan 17, 2013 6:24 PM by Jon Scholten RSS
al.johnson Newcomer 22 posts since
Dec 16, 2010
Currently Being Moderated

Jan 10, 2013 3:12 PM

iOS app download timing

Has anyone experienced problems loading large iOS (iPad in this case) apps through a webgateway?  We have a 11-12M app that loads fine over 3G or an open Internet connect, but fails when going through the webgateway.  It appears to start fine, then stops after 10 seconds.  The tcpdump shows the request from the client (via itms-services://...) properly being forwarded to the destination, and content being retrieved by the gateway.  After 10 seconds (with no packets returned to the client), the client send a RST.

I've set the proxy control timeout value to 3600 seconds, and do not enable a progress page nor data trickling.

For some reason, it appears that the webgateway is queueing up the content before sending it back to the client, and the client has a short timeout for a response.Any ideas on how I can force the webgateway to flow the content on to the client?

We're on webgateway 7.2.0.1 on WG5000 devices.

  • Jon Scholten McAfee SME 856 posts since
    Nov 3, 2009
    Currently Being Moderated
    1. Jan 10, 2013 4:46 PM (in response to al.johnson)
    Re: iOS app download timing

    Hi Al,

     

    So you are not sending a progress page at all?

     

    If you are applying filters, then you definitly DO want the progress pages to be shown, otherwise the Web Gateway WILL sit on the download until its done downloading and scanning the content. The progress page is meant to allow the MWG to let the client know that it's downloading the file. In the least you should have data trickling.

     

    The 3600 second timeout you set only changes the MWG's behavior with the web server, ie if you are attempting to run a report on a web server and the server takes for ever to return a response.

     

    This timeout cannot control the clients own timeout (which sounds like it's 10 seconds).

     

    Best,

    Jon

  • alexott McAfee Employee 125 posts since
    Jan 19, 2011
    Currently Being Moderated
    3. Jan 11, 2013 9:36 AM (in response to al.johnson)
    Re: iOS app download timing

    The iOS packages are zip-based archives, so we're detecting that this is a zip, so we're going to open it with corresponding opener, and checking everything in it.There is separate mime type for it: application/vnd.apple.ios-package, so you can disable opening of this file types if you want

  • alexott McAfee Employee 125 posts since
    Jan 19, 2011
    Currently Being Moderated
    4. Jan 11, 2013 9:37 AM (in response to Jon Scholten)
    Re: iOS app download timing

    I'm not sure, that Progress pages will help in this case, but Data Trickling can, as it start to send data to client while file is downloaded & processed

  • Jon Scholten McAfee SME 856 posts since
    Nov 3, 2009
    Currently Being Moderated
    6. Jan 11, 2013 3:47 PM (in response to al.johnson)
    Re: iOS app download timing

    Hi,

     

    If you open a case I can pick it up.

     

    This has to do something with filtering applying (be it anti-malware or the opener) causing the file to not be sent back immediatley.

     

    Include whatever data you have including a feedback. Dont post it here.

     

    Best,

    Jon

  • Jon Scholten McAfee SME 856 posts since
    Nov 3, 2009
    Currently Being Moderated
    9. Jan 17, 2013 6:24 PM (in response to al.johnson)
    Re: iOS app download timing

    Just to further clarify, some properties require further inspection in order to be filled.

     

    In this case Al had a rule which was calling "MediaTypes.EnsuredTypes" above his data trickling rule. The media type rule was causing the MWG to sit on the file download rather than start trickling data back to the client.

     

    So, moving data trickling to the top resolved the issue in this case because MWG would start to send data to the client and not sit on the file instead.

     

    Best,

    Jon

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points