HTTP dropping

[jolly403]

HTTP requests stop responding after time. Problem is intermittent, anywhere from 30 minutes to a day or so. Issuing a cpstop/cpstart or rebooting the server fixes problem. When problem is occurring, I can still ping the firewall from internal client and ping internet hosts from the firewall. From the firewall I can resolve internet DNS entries. SMTP mail is still flowing in and out also.

Configuration:
Firewall-1 NGX R60 build 418 running on Windows Server 2003 SP1

Internal client>>>Trend Micro Interscan Web Security Server(IWSS)>>>Firewall>>>DSL

Internal client's Internet Explorer is configured with a proxy server setting of the IWSS server. The IWSS server is configured with the firewall as an upstream proxy. The firewall has a rule with an http resource allowing http traffic.

Anybody got any ideas?
Thanks
Brian

 

[stooo]

Do the logs say anything?

 

[watchguardmonkey]

are you logging on this rule? if so have you setup the logs to rollover each day, have seen it were you don't roll the logs each day on NT that it has performance issues on the connection state table, when you reboot this clears until it clogs up again.

 

[jolly403]

That's what's weird, I don't see anything bad in the logs (I am logging the HTTP rule). I see some, but not all, of the requests for http when issue is happening.

I assume you are referring to the Checkpoint logs, not the NT event logs. I didn't have them rolling everyday, in fact I had increased the file size point to roll over. I'll try reducing it back down-setting it roll each day. Makes me wonder though because it can hang up even after a few hours.

Thanks for the input.
Brian