Proxy closes connection, not server/client. Why?

asked 2021-01-15 14:07:38 +0000

wshark_de gravatar image

updated 2021-01-15 14:15:45 +0000

grahamb gravatar image

Hello Wireshark-Community, we have a challenge with our proxy server, because after a random time (minutes to hours) period it closes the control TCP session of our cloud-based videoconferencing system which causes the UDP traffic to stop flowing (conference user kicked out). Connection is not closed by client/server, but from proxy (Screenshots). Can you name some options why a proxy would do so?

VC Participant: 192.168.0.1 Proxy: 10.10.10.1 VC-System: 172.16.0.1

Client to to Proxy:

Proxy to VC:

Thanks for helping

edit retag flag offensive close merge delete

Comments

What proxy is this? What do the logs of the proxy say?

Jaap gravatar imageJaap ( 2021-01-15 14:48:59 +0000 )edit

Indeed the most obvious place to look for answeres is the proxy making the decision. F5 for example has a default timeout of only 60 seconds.

hugo.vanderkooij gravatar imagehugo.vanderkooij ( 2021-01-15 15:03:25 +0000 )edit

It is: Trend Micro InterScan Web Security Virtual Appliance (IWSVA). No access to logs yet, as admin is not in office anymore. Will check later.

wshark_de gravatar imagewshark_de ( 2021-01-15 15:29:55 +0000 )edit
add a comment