"Error 324 (net::ERR_EMPTY_RESPONSE)" in web browser when accessing a web server through Security Gateway in Non-Transparent Proxy mode without next proxy

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk111741
Technical Level
Product	Quantum Security Gateways
Version	R76, R77, R77.10, R77.20, R77.30
Platform / Model	All
Date Created	30-May-2016
Last Modified	04-Sep-2019

Symptoms

"Error 324 (net::ERR_EMPTY_RESPONSE): The server closed the connection without sending any data" in web browser when accessing a web server through Security Gateway in Non-Transparent Proxy mode without next proxy.
Smart View Tracker log shows:
- Type = Log
- Product = Security Gateway/Management
- Action = Reject
- Reason = Proxy: Internal error; Connection was rejected due to internal error
- Service = HTTP_and_HTTPS_proxy (8080)
Example:
Kernel debug ('fw ctl debug -m WS + connection session') on Security Gateway shows:
... ... ws_http_session_server_read: side WS_SERVER_SIDE,Old state:<header read> -> New state:<header read>; ... ... ws_connection_event_handler: received a FIN from the server side, checking for pending data; ... ... ws_connection_can_close_client: server side returned FIN or is not connected, checking for a write session; ... ... ws_connection_can_close_client: current_write_session not found, closing the connection;
Issue also occurs when Proxy mode is disabled and IPS blade with "Header Spoofing" protection is enabled (action "Prevent").

Cause

Web server sends HTTP response packet with HTTP headers section that contains a single \r\n (CR-LF) instead of \r\n\r\n (CR-LF CR-LF).
Web Intelligence module does not process this HTTP header. As a result, the HTTP connection is closed without passing the data to the client.

Solution

Note: To view this solution you need to Sign In .