2 Replies Latest reply on Jul 15, 2015 3:59 AM by otruniger

    High number of HTTPS request

    layer0

      Hello

       

      We have the following situation, in the last couple of days we see a rise in the number of HTTPS request received in the web gateway, but not the traffic of HTTPS.

       

      This situation has generated tha the cpu is at 100%

       

       

      Finally the users has experienced poor navigation. So how can i know what is generating this amount of https request to the web gateway. We have integrated Web reporter but the reports looks normal in comparison with previos dates. Also we are not doing HTTPS inspection.

       

      Any help i'll be gratefull

       

      Thanks

        • 1. Re: High number of HTTPS request
          msiemens

          You may need to look in the raw log files for authentication failures. These records will have a status code of 407 and are typically not imported into WR which is probably why WR isn't helping you.

           

          We had a similar issue with a couple of versions of Chrome. Under certain conditions, Chrome would bombard the MWG with requests that weren't authenticated. It was so bad that the logs became very large and threatened to fill up the disk. Thank goodness for log compression! Not saying that Chrome is the culprit in your case...you'll have to do some investigation and find who/what may be issuing requests that aren't authenticated.

           

          Hope that helps,

          Mike

          • 2. Re: High number of HTTPS request
            otruniger

            I second Mike's statement. We occasionally see situations where especially some Javascript code produces loops either for 407 or also for 403 responses. Sometimes we need to disable authentication for some sites or omit a block rule to get rid of this.

            Othmar