EX SSL-VPN: Unable to access web application with portmap translation method result-in apache2 core

03/26/2020 5 10098

DESCRIPTION:
EX SSL-VPN: Unable to access web application with portmap translation method result-in apache2 cores

RESOLUTION:

Unable to access web application with portmap translation method result-in apache2 cores. When users accessed the web application from the workpalce it dumps apache2 cores immediately.

****************Snippet of extraweb_plaintext.log**************
=======================================================================
HOST : Web Browser (135.185.163.21)
DATE : 29/Nov/2010 12:09:08.629898 -0600
ID : 17128:392
SSL-SESSION : eDzuzmeBUXrlQIsKGDb4sc/nM1+5ENa7DvGJi4gxhZY=
ACTION : write
-----------------------------------------------------------------------
HTTP/1.1 302 Found
Date: Mon, 29 Nov 2010 18:09:08 GMT
Server: unknown
Location:
https://www.domain.com/__extraweb__EPCmicrointerrogatorpage?success=%2F__extraweb__EPCmicrointerrogatordata%3Fsuccess%3Dhttps%253A%252F%252Ftpcssl2.na.alcatel-lucent.com%252Fworkplace%252Faccess%252Fhome%26alias%3Dworkplace&alias=workplace
Set-Cookie:
EXTRAWEB_STATE=EAABEAAGBAADaWQAEAABBAABAAQABXNzcGYAEAABBQAABAAFaG9zdAAQAAEEAAEA;
path=/; secure
Set-Cookie: EXTRAWEB_REFERER=%252Fworkplace%252Faccess%252Fhome; path=/
Content-Length: 557
Connection: close
Content-Type: text/html; charset=iso-8859-1

******************snippet of access_servers.log****************
StartTime='29/Nov/2010 09:47:07 -0600' Src='135.185.163.21' User='-'
Method='GET' HTTPVersion='0x3e9' Request='GET / HTTP/1.1' Status='302'
Bytes='358' PlatformPrefix='' EquipmentId='-'
[29/Nov/2010:09:47:07.386589 -0600] usil100014-sslvpn-0 002141 ew 10000005 Info
Audit VirtualHost='tpcssl2.na.alcatel-lucent.com' StartTime='29/Nov/2010
09:47:07 -0600' Src='135.185.163.21' User='' Method='GET' HTTPVersion='0x3e9'
Request='GET http://127.0.0.1:8085/workplace/access/home HTTP/1.1' Status='200'
Bytes='1814' PlatformPrefix='' EquipmentId='-'
[29/Nov/2010:09:47:07.422296 -0600] usil100014-sslvpn-0 002141 ew 10000007
Warning Auth ::STATE:: Failed to destroy TEAM credentials
(key=Zq8HeGuihddKWIhOwd43OQ==): Error
[29/Nov/2010:09:47:07.424434 -0600] usil100014-sslvpn-0 002141 ew 10000007 Info
Audit VirtualHost='tpcssl2.na.alcatel-lucent.com' StartTime='29/Nov/2010
09:47:07 -0600' Src='135.185.163.21' User='-' Method='GET' HTTPVersion='0x3e9'
Request='GET /__extraweb__logoff? HTTP/1.1' Status='200' Bytes='2110'
PlatformPrefix='' EquipmentId='-'
[29/Nov/2010:09:47:07.448917 -0600] usil100014-sslvpn-0 002141 ew 10000006 Info
Audit VirtualHost='tpcssl2.na.alcatel-lucent.com' StartTime='29/Nov/2010
09:47:07 -0600' Src='135.185.163.21' User='-' Method='GET' HTTPVersion='0x3e9'
Request='GET /__extraweb__/assets/themes/DefaultWorkplaceTheme//default.css
HTTP/1.1' Status='304' Bytes='0' PlatformPrefix='' EquipmentId='-'

Resolution/Workaround:

SonicWall Aventail engineering has investigated and fixed the issue with an official hotfix.  Here is the hotfix released for customers "Pform-hotfix-10_5_2-002" and it's available for download in recommended hotfixes.

Tracking ID: 96458