11-09-2009 12:46 AM
I am fighting with my first Web Application Firewall installation. The configuration is working fine using simple test requests. Nevertheless it is not woking as soon as I move into production. Some responses to not get through the ServerIron for some reason. The request itself is going to the real server but the real server responses does not go to the client. It is an HTTP application based on ASP... any ideas?
11-09-2009 05:01 AM
What is the release you are running at? Is it maybe "chunked" traffic coming back from the real server? Have a look at the "Transfer-Encoding" header of the real server reply.
11-09-2009 12:38 PM
I would suggest to upgrade to 10.2.01l which is available since last week. The reason I have been asking is the following bug I found in one of my setups a few weeks ago:
A ServerIron configured for Application Firewall Switching (APPFW) drops HTTP responses received from a real server with the header “Transfer-Encoding: chunked”.
Resolution: Fixed in Release 10.2.01l.