Connection TimeOut - Message Diagnostic

IT_DCIT_DC
in Firebox - Proxies

Hi all,
someone could help me with the next LOG.

Traffic Monitor - Diagnostic

2019-05-28 13:52:17 pxy 0x10484c10-1325137 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 875: 0.0.0.0:42857 -> 172.217.8.100:443 [!B c] {N}[L!BP]
2019-05-28 13:52:17 pxy 0x10a59ca0-1325129 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 860: 0.0.0.0:34757 -> 172.217.8.142:443 [!B c] {N}[L!BP]
2019-05-28 13:52:17 pxy 0x106fcdc8-1323478 connect failed Connection timed out 209: 192.168.10.81:51170 -> 172.217.2.142:443 [A t] {R} | 254: 190.202.27.197:51170 -> 172.217.2.142:443 [!B c] {B}[P]
2019-05-28 13:52:17 https-proxy 0x106fcdc8-1323478 209: 192.168.10.81:51170 -> 172.217.2.142:443 [A t] {R} | 254: 190.202.27.197:51170 -> 172.217.2.142:443 [!B fc] {B}[P]: failed to connect B channel
2019-05-28 13:52:17 pxy 0x10acc890-1325125 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 120: 0.0.0.0:45649 -> 172.217.8.78:443 [!B c] {N}[L!BP]
2019-05-28 13:52:17 pxy 0x1045fc60-1325143 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 62: 0.0.0.0:38829 -> 172.217.8.78:443 [!B c] {N}[L!BP]
2019-05-28 13:52:17 pxy 0x1083de20-1325146 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 871: 0.0.0.0:54076 -> 172.217.3.78:443 [!B c] {N}[L!BP]
2019-05-28 13:52:18 pxy 0x108f55c8-1325151 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 889: 0.0.0.0:34877 -> 216.58.192.46:443 [!B c] {N}[L!BP]
2019-05-28 13:52:18 pxy 0x11155fc8-1325153 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 467: 0.0.0.0:41809 -> 172.217.8.78:443 [!B c] {N}[L!BP]
2019-05-28 13:52:18 pxy 0x10309c10-1325157 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 310: 0.0.0.0:45183 -> 173.194.215.188:443 [!B c] {N}[L!BP]
2019-05-28 13:52:19 pxy 0x109d27f0-1325164 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 166: 0.0.0.0:37271 -> 172.217.3.78:443 [!B c] {N}[L!BP]
2019-05-28 13:52:20 pxy 0x1129c028-1325169 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 571: 0.0.0.0:43564 -> 172.217.3.78:443 [!B c] {N}[L!BP]
2019-05-28 13:52:22 pxy 0x112c9130-1325172 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 75: 0.0.0.0:36924 -> 172.217.3.78:443 [!B c] {N}[L!BP]
2019-05-28 13:52:22 pxy 0x111bc2c8-1325177 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 293: 0.0.0.0:54372 -> 172.217.3.78:443 [!B c] {N}[L!BP]
2019-05-28 13:52:22 pxy 0x10d3be00-1325175 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 230: 0.0.0.0:39418 -> 172.217.3.78:443 [!B c] {N}[L!BP]
2019-05-28 13:52:23 pxy 0x102a10f0-1325187 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 485: 0.0.0.0:55824 -> 216.58.192.46:443 [!B c] {N}[L!BP]
2019-05-28 13:52:24 pxy 0x10dacfa0-1325195 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 368: 0.0.0.0:48182 -> 172.217.3.78:443 [!B c] {N}[L!BP]
2019-05-28 13:52:25 http-proxy 0x108a4340-1326144 unable to parse request start-line line='\x16\x03\x01\x00\xf0\x01\x00\x00\xec\x03\x03K\x12\xf9\x9dl\xa5\xc8\x0a'
2019-05-28 13:52:26 pxy Peer certificate preverify failed (err 19 : self signed certificate in certificate chain) for [/CN=AnyNet Root CA/O=philandro Software GmbH/C=DE] (cert 0x102951f8, store 0x3f82db48)
2019-05-28 13:52:26 https-proxy 0x10c94288-1326150 https_first_record_header_cb: Only got 9 bytes! Aborting connection 95: 192.168.10.81:51367 -> 162.250.6.158:443 [A t] {L}
2019-05-28 13:52:26 https-proxy 0x107ccb58-1326152 https_first_record_header_cb: Only got 9 bytes! Aborting connection 230: 192.168.10.81:51369 -> 162.250.6.158:443 [A t] {L}
2019-05-28 13:52:27 iked (190.202.27.197<->181.225.41.85)ikeDoXfrmAcquireAction: IkeStartNegotiation failed - Err=-1 Gateway(DC Gateway)
2019-05-28 13:52:28 pxy 0x101f8888-1325232 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 114: 0.0.0.0:40092 -> 172.217.0.174:443 [!B c] {N}[L!BP]
2019-05-28 13:52:28 pxy 0x113ddcc8-1325237 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 302: 0.0.0.0:45030 -> 172.217.3.78:443 [!B c] {N}[L!BP]
2019-05-28 13:52:29 pxy 0x10d20a90-1325239 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 260: 0.0.0.0:33846 -> 216.58.192.46:443 [!B c] {N}[L!BP]
2019-05-28 13:52:29 pxy 0x10dbf638-1325241 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 318: 0.0.0.0:59161 -> 172.217.0.174:443 [!B c] {N}[L!BP]
2019-05-28 13:52:30 pxy Peer certificate preverify failed (err 20 : unable to get local issuer certificate) for [/C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft ECC Content Distribution Secure Server CA 2.1] (cert 0x100f42f0, store 0x3f82db48)
2019-05-28 13:52:31 pxy 0x101cde10-1325246 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 374: 0.0.0.0:53590 -> 172.217.8.100:443 [!B c] {N}[L!BP]
2019-05-28 13:52:31 iked (190.202.27.197<->181.225.41.85)IKE phase-1 negotiation from 190.202.27.197:500 to 181.225.41.85:500 failed. Gateway-Endpoint='DC Gateway' Reason=Message retry timeout. Check the connection between local and remote gateway endpoints.
2019-05-28 13:52:32 pxy 0x1032fd38-1325261 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 509: 0.0.0.0:42401 -> 216.58.192.35:443 [!B c] {N}[L!BP]
2019-05-28 13:52:33 pxy 0x103fd230-1325264 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 313: 0.0.0.0:44552 -> 172.217.8.78:443 [!B c] {N}[L!BP]
2019-05-28 13:52:35 pxy 0x1055aec0-1325275 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 611: 0.0.0.0:32778 -> 172.217.3.78:443 [!B c] {N}[L!BP]
2019-05-28 13:52:36 pxy 0x10f58c78-1325295 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 680: 0.0.0.0:35061 -> 216.58.192.46:443 [!B c] {N}[L!BP]
2019-05-28 13:52:38 pxy 0x10bc4248-1323758 connect failed Connection timed out 61: 192.168.10.84:56977 -> 172.217.0.174:443 [A t] {R} | 121: 190.202.27.197:56977 -> 172.217.0.174:443 [!B c] {B}[P]
2019-05-28 13:52:38 https-proxy 0x10bc4248-1323758 61: 192.168.10.84:56977 -> 172.217.0.174:443 [A t] {R} | 121: 190.202.27.197:56977 -> 172.217.0.174:443 [!B fc] {B}[P]: failed to connect B channel
2019-05-28 13:52:38 pxy 0x10393d40-1325305 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 189: 0.0.0.0:50824 -> 172.217.8.78:443 [!B c] {N}[L!BP]
2019-05-28 13:52:40 pxy 0x1115c188-1325308 connect failed Connection timed out -1: 0.0.0.0:0 -> 0.0.0.0:0 [!A] {N} | 141: 0.0.0.0:53523 -> 216.58.192.46:443 [!B c] {N}[L!BP]

Comments

  • james.carsonjames.carson Moderator, WatchGuard Representative

    Hi IT_DC,

    The logs you're seeing are related to the (HTTPS) proxy. It looks like it's failing to establish a connection on the B channel (B is the channel that goes from the firewall to the final destination.)

    Sometimes this can mean the webserver is not responding, other times It might indicate a problem with the proxy.

    I'd suggest opening an incident with support so they can take a look at this with you more in-depth.

    You can do so here:
    (Contact Support)
    https://www.watchguard.com/wgrd-support/contact-support

    Thank you,

    -James Carson
    WatchGuard Customer Support

Sign In to comment.