5 Replies Latest reply on May 28, 2014 4:18 AM by philiprey

    Invalid seek

    RayP

      Hi all,

       

      When we're trying to open http://debatgemist.tweedekamer.nl/ and start the media we receive "Invalid seek".

       

      Running version: 7.3.2.8.0 (17286)

       

      Someone has a solution?

       

      Putting the url in the "Global Whitelist" didn't solved it.

       

      Regards,

      Ray

        • 1. Re: Invalid seek
          philiprey

          Hi RayP,

           

          I could access the site all well using my MWG.

          Have you tried checking rule tracing for this and see what is being blocked along the access?

           

          There could be a rule which blocks the access like mediatype rules (e.g. flash players).

           

          To further isolate if this is MWG prob is to bypass fully the proxy and see if you could access the site well.

           

          Regards,

          philiprey

          • 2. Re: Invalid seek
            RayP

            Hi philiprey,

             

            Even if I put the IP of a test system in the "Client IP Is in list Allowed Clients" it don't work. So the action is [Stop Cycle].

            This is also seen in the Rule Tracing Central.

             

            [Client IP is in the List Allowed Clients]

             

            Without the McAfee WebGateway it works fine.

             

            Here's a printscreen:

             

            5-28-2014 08-06-25.jpg

             

            Regards,

            Ray

            • 3. Re: Invalid seek
              philiprey

              Hi Ray,

               

              Are there any odd traffic before it hit the global whitelist?

               

              How about other security devices?

              If it doesn't work with proxy on, you might want to compare the routes you go when in direct and the the routes the proxy goes to.

               

              I don't see any issues on my side, just a rule which blocks application/x-shockwave-flash blocking the video but when whitelisted, pushes through.

              I am also using 7.3.2.8 btw.

               

              Regards,

              philiprey

              • 4. Re: Invalid seek
                RayP

                Hi Philiprey,

                 

                I think i've found it after runining a tcpdump.

                 

                The site is using 80/442, but when to try playing the flash video it's not using the proxy anymore.

                The workstation wants to communicatie directly to TCP Port 1935.

                 

                And TCP 1935 is blocked for all local workstations.

                 

                See also: https://community.mcafee.com/docs/DOC-4872

                 

                Regards,

                Ray

                • 5. Re: Invalid seek
                  philiprey

                  Hi Ray,

                   

                  Great to hear that you've found the cause.

                  I did a packet trace to check and I see tcp port 1935 as well.

                  It seems port 1935 is allowed on our network which makes viewing worry-free on my side.

                   

                  Thanks for the info as well. One to look out in future implem.

                   

                  Regards,

                  philiprey